Threats tagged 'ghsa-x59p-xj2h-33r8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-100688budibase server · Insecure Direct Object Reference High7.1EPSS 0.3%2026-09-26CVE Database V5CVE-2026-100688 Budibase server versions before 3.45.0 have an authorization bypass vulnerability in the GET /api/applications/:appId/appPackage endpoint. This flaw allows authenticated users to access another tenant's application metadata and source code without proper authorization. Sensitive details exposed include navigation structure, role names, internal screen URLs, JavaScript snippets, and user identifiers. EPSS 0.3%Vulnerability #ghsa-x59p-xj2h-33r8	CVE Database V5	2026-09-26

Page 1 of 1