Budibase NoSQL Injection via Query Templates (CVE-2024-54350) with POC

github.com 2026-07-02查看中文 →

Security AdvisoryCVE-2024-54350CriticalBudibase

Affected:

Budibase <= 3.39.12

Fixed in:

3.39.12

Referenced CVEs: CVE-2026-54350 · 10.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

HuggingFace datasets FolderBasedBuilder Path Traversal Fix and PoC 2026-07-25 Jan: 0.0.0.0 binding bypasses Trusted Hosts whitelist causing CORS credential leak 2026-07-25 HuggingFace Datasets Folder-based Builder Path Traversal (Arbitrary File Read) 2026-07-25 Huggingface datasets Path Traversal Vulnerability Fix and Analysis 2026-07-25 Tauri Proxy CORS Bypass and Host Header Validation Bypass via 0.0.0.0 Binding 2026-07-25

Offline Archive

Offline screenshot & PDF are Pro-exclusive