Threats Tagged 'ghsa-2xgg-r2wc-c5r2'

Budibase server versions up to 3.38.1 contain a SQL injection vulnerability in the MySQL integration. The vulnerability arises because table names retrieved from INFORMATION_SCHEMA.TABLES are interpolated into DESCRIBE queries wrapped in backticks without escaping embedded backticks. Since the connection enables multipleStatements, an attacker can inject additional SQL statements by creating a maliciously named table. This allows arbitrary SQL execution during routine schema introspection triggered by an administrator.