Vulnerability-Lookup

CVE-2026-25043 (GCVE-0-2026-25043)

Vulnerability from cvelistv5 – Published: 2026-04-03 15:35 – Updated: 2026-04-03 16:11

Title

Budibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Flooding

Summary

Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase’s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the “Forgot Password” endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M

References

2 references

URL	Tags
https://github.com/Budibase/budibase/security/adv…	x_refsource_CONFIRM
https://github.com/Budibase/budibase/commit/21bc3…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Budibase	budibase	Affected: < 3.23.25

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25043",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T16:05:27.831255Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T16:11:18.857Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "budibase",
          "vendor": "Budibase",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.25"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase\u2019s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the \u201cForgot Password\u201d endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-03T15:35:10.840Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh"
        },
        {
          "name": "https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7"
        }
      ],
      "source": {
        "advisory": "GHSA-277c-prw2-rqgh",
        "discovery": "UNKNOWN"
      },
      "title": "Budibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Flooding"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25043",
    "datePublished": "2026-04-03T15:35:10.840Z",
    "dateReserved": "2026-01-28T14:50:47.886Z",
    "dateUpdated": "2026-04-03T16:11:18.857Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-25043",
      "date": "2026-08-01",
      "epss": "0.00297",
      "percentile": "0.2201"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-25043\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-03T16:16:35.607\",\"lastModified\":\"2026-07-24T22:10:00.140\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase\u2019s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the \u201cForgot Password\u201d endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25.\"},{\"lang\":\"es\",\"value\":\"Budibase es una plataforma de c\u00f3digo abierto de bajo c\u00f3digo. Antes de la versi\u00f3n 3.23.25, existe una vulnerabilidad de l\u00f3gica de negocio en la funcionalidad de restablecimiento de contrase\u00f1a de Budibase debido a la ausencia de limitaci\u00f3n de tasa, CAPTCHA o mecanismos de prevenci\u00f3n de abuso en el endpoint \u0027Olvid\u00e9 mi contrase\u00f1a\u0027. Un atacante no autenticado puede activar repetidamente solicitudes de restablecimiento de contrase\u00f1a para la misma direcci\u00f3n de correo electr\u00f3nico, resultando en el env\u00edo de cientos de correos electr\u00f3nicos de restablecimiento de contrase\u00f1a en un corto per\u00edodo de tiempo. Esto permite la inundaci\u00f3n masiva de correos electr\u00f3nicos, el acoso a usuarios, la denegaci\u00f3n de servicio (DoS) contra las bandejas de entrada de los usuarios, y un potencial impacto financiero y reputacional para Budibase. Este problema ha sido parcheado en la versi\u00f3n 3.23.25.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"Budibase\",\"product\":\"budibase\",\"versions\":[{\"version\":\"\u003c 3.23.25\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-03T16:05:27.831255Z\",\"id\":\"CVE-2026-25043\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.23.25\",\"matchCriteriaId\":\"08D73E1B-557B-4CEA-9DA0-3A46C8B9B5F4\"}]}]}],\"references\":[{\"url\":\"https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-04-04T17:00:49+00:00",
      "cve": "CVE-2026-25043",
      "id": "CVE-2026-25043",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Budibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Flooding",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25043.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25043\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-03T16:05:27.831255Z\"}}}], \"references\": [{\"url\": \"https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-03T16:09:07.643Z\"}}], \"cna\": {\"title\": \"Budibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Flooding\", \"source\": {\"advisory\": \"GHSA-277c-prw2-rqgh\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Budibase\", \"product\": \"budibase\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 3.23.25\"}]}], \"references\": [{\"url\": \"https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh\", \"name\": \"https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7\", \"name\": \"https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase\\u2019s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the \\u201cForgot Password\\u201d endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-03T15:35:10.840Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-25043\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-03T16:11:18.857Z\", \"dateReserved\": \"2026-01-28T14:50:47.886Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-03T15:35:10.840Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-25043

Vulnerability from fkie_nvd - Published: 2026-04-03 16:16 - Updated: 2026-06-17 10:24

Severity

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
security-advisories@github.com	https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7	Patch
security-advisories@github.com	https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh	Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh	Vendor Advisory

Impacted products

	Vendor	Product	Version
	budibase	budibase	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "budibase",
          "vendor": "Budibase",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.23.25"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "08D73E1B-557B-4CEA-9DA0-3A46C8B9B5F4",
              "versionEndExcluding": "3.23.25",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase\u2019s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the \u201cForgot Password\u201d endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25."
    }
  ],
  "id": "CVE-2026-25043",
  "lastModified": "2026-06-17T10:24:01.833",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-25043",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-03T16:05:27.831255Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-03T16:16:35.607",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

WID-SEC-W-2026-0990

Vulnerability from csaf_certbund - Published: 2026-04-07 22:00 - Updated: 2026-04-07 22:00

Summary

Budibase: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Budibase ist eine quelloffene Low-Code-Plattform für die Erstellung interner Anwendungen, wie z. B. Verwaltungspanels.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, sich erweiterte Rechte zu verschaffen – sogar Administratorrechte –, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Sonstiges - UNIX

CVE-2026-35214

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Open Source Budibase <3.32.5 Open Source / Budibase		<3.32.5
Open Source Budibase <3.33.4 Open Source / Budibase		<3.33.4

CVE-2026-31818

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Open Source Budibase <3.32.5 Open Source / Budibase		<3.32.5
Open Source Budibase <3.33.4 Open Source / Budibase		<3.33.4

CVE-2026-35216

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Open Source Budibase <3.32.5 Open Source / Budibase		<3.32.5
Open Source Budibase <3.33.4 Open Source / Budibase		<3.33.4

CVE-2026-25044

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
Open Source Budibase <3.32.5 Open Source / Budibase		<3.32.5
Open Source Budibase <3.33.4 Open Source / Budibase		<3.33.4

CVE-2026-35218

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Budibase <3.32.5 Open Source / Budibase		<3.32.5

CVE-2026-25040

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Budibase App (SaaS) Open Source / Budibase	`cpe:/a:budibase:budibase:app_%28saas%29`	App (SaaS)

CVE-2026-25043

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Open Source Budibase App (SaaS) Open Source / Budibase	`cpe:/a:budibase:budibase:app_%28saas%29`	App (SaaS)

References

11 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://github.com/advisories/GHSA-2wfh-rcwf-wh23	external
https://github.com/advisories/GHSA-7r9j-r86q-7g45	external
https://github.com/advisories/GHSA-fcm4-4pj2-m5hf	external
https://github.com/advisories/GHSA-gjw9-34gf-rp6m	external
https://github.com/Budibase/budibase/security/adv…	external
https://github.com/Budibase/budibase/security/adv…	external
https://github.com/Budibase/budibase/security/adv…	external
https://github.com/Budibase/budibase/security/adv…	external
https://github.com/Budibase/budibase/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Budibase ist eine quelloffene Low-Code-Plattform f\u00fcr die Erstellung interner Anwendungen, wie z. B. Verwaltungspanels.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um beliebigen Code auszuf\u00fchren \u2013 sogar mit Root-Rechten \u2013, sich erweiterte Rechte zu verschaffen \u2013 sogar Administratorrechte \u2013, Cross-Site-Scripting-Angriffe durchzuf\u00fchren, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuf\u00fchren oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0990 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0990.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0990 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0990"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-2wfh-rcwf-wh23 vom 2026-04-07",
        "url": "https://github.com/advisories/GHSA-2wfh-rcwf-wh23"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-7r9j-r86q-7g45 vom 2026-04-07",
        "url": "https://github.com/advisories/GHSA-7r9j-r86q-7g45"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-fcm4-4pj2-m5hf vom 2026-04-07",
        "url": "https://github.com/advisories/GHSA-fcm4-4pj2-m5hf"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gjw9-34gf-rp6m vom 2026-04-07",
        "url": "https://github.com/advisories/GHSA-gjw9-34gf-rp6m"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-2wfh-rcwf-wh23 vom 2026-04-07",
        "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-2wfh-rcwf-wh23"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-fcm4-4pj2-m5hf vom 2026-04-07",
        "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-fcm4-4pj2-m5hf"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gp5x-2v54-v2q5 vom 2026-04-07",
        "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-gp5x-2v54-v2q5"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gp5x-2v54-v2q5 vom 2026-04-07",
        "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-gp5x-2v54-v2q5 vom 2026-04-07",
        "url": "https://github.com/Budibase/budibase/security/advisories/GHSA-4wfw-r86x-qxrm"
      }
    ],
    "source_lang": "en-US",
    "title": "Budibase: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-07T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-08T10:05:47.682+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0990",
      "initial_release_date": "2026-04-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.33.4",
                "product": {
                  "name": "Open Source Budibase \u003c3.33.4",
                  "product_id": "T052449"
                }
              },
              {
                "category": "product_version",
                "name": "3.33.4",
                "product": {
                  "name": "Open Source Budibase 3.33.4",
                  "product_id": "T052449-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:budibase:budibase:3.33.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.32.5",
                "product": {
                  "name": "Open Source Budibase \u003c3.32.5",
                  "product_id": "T052450"
                }
              },
              {
                "category": "product_version",
                "name": "3.32.5",
                "product": {
                  "name": "Open Source Budibase 3.32.5",
                  "product_id": "T052450-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:budibase:budibase:3.32.5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "App (SaaS)",
                "product": {
                  "name": "Open Source Budibase App (SaaS)",
                  "product_id": "T052453",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:budibase:budibase:app_%28saas%29"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Budibase"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-35214",
      "product_status": {
        "known_affected": [
          "T052450",
          "T052449"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-35214"
    },
    {
      "cve": "CVE-2026-31818",
      "product_status": {
        "known_affected": [
          "T052450",
          "T052449"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-31818"
    },
    {
      "cve": "CVE-2026-35216",
      "product_status": {
        "known_affected": [
          "T052450",
          "T052449"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-35216"
    },
    {
      "cve": "CVE-2026-25044",
      "product_status": {
        "known_affected": [
          "T052450",
          "T052449"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-25044"
    },
    {
      "cve": "CVE-2026-35218",
      "product_status": {
        "known_affected": [
          "T052450"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-35218"
    },
    {
      "cve": "CVE-2026-25040",
      "product_status": {
        "known_affected": [
          "T052453"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-25040"
    },
    {
      "cve": "CVE-2026-25043",
      "product_status": {
        "known_affected": [
          "T052453"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-25043"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-25043 (GCVE-0-2026-25043)

FKIE_CVE-2026-25043

WID-SEC-W-2026-0990

Tags

Sightings

Nomenclature