GitHub Advisoryadvisory · npm

GHSA-x92g-49gh-63qm Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

MEDIUM Published 2022-09-17 Modified 2026-02-27 Official page ↗
Aliases
CVE-2022-3225
Ecosystem
npm
Packages
@budibase/worker, @budibase/builder, @budibase/bbui
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-284, CWE-913
Reviewed
2023-08-03

Affected packages

• npm @budibase/worker: < 1.3.20 → fixed in 1.3.20 • npm @budibase/builder: < 1.3.20 → fixed in 1.3.20 • npm @budibase/bbui: < 1.3.20 → fixed in 1.3.20

Description

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

Related

Alias · CVE (1)

  • CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20. vulnerability

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-913 Improper Control of Dynamically-Managed Code Resources weakness

References