Threats Tagged 'ghsa-xg5g-26x8-cvf4'

Budibase server contains an authenticated Server-Side Request Forgery (SSRF) vulnerability via DNS rebinding in two outbound fetch paths: OpenAPI import and REST query execution. A builder-level user can cause the server to issue HTTP requests to internal or loopback addresses by exploiting a gap between hostname validation and actual DNS resolution during fetch. This bypasses Budibase's outbound fetch protections, allowing access to internal services that should be blocked.