A server-side request forgery vulnerability in Budibase Server allows authenticated builder-level users to conduct unauthorized requests, potentially leading to full database compromise.

The application contains a server-side request forgery (SSRF) flaw within the datasource verify endpoint. This allows an authenticated user with builder-level privileges to supply arbitrary URLs that bypass validation, facilitating the exfiltration of sensitive internal CouchDB credentials.

The exploitation of this vulnerability poses a significant risk to organizational data integrity and confidentiality. By leveraging the SSRF flaw, an attacker can gain full database access in cloud-based deployments, which may result in unauthorized data exposure or administrative control over backend systems. The CVSS score of 7.6 reflects the high severity of this impact, particularly regarding the potential for lateral movement and credential theft within the infrastructure.

Immediate Action: Update Budibase Server to version 3.41.3 or later to remediate the underlying SSRF vulnerability.

Proactive Monitoring: Review application access logs for unusual requests to the datasource verify endpoint, specifically monitoring for connections directed toward internal or unauthorized external infrastructure.

Compensating Controls: Implement strict egress filtering on the server hosting the Budibase instance to prevent unauthorized requests from reaching internal sensitive services or attacker-controlled endpoints.

Public Exploit Available: No (exploit_available: false)

Given the high severity of this vulnerability, administrators should prioritize the update to version 3.41.3 immediately. While the requirement for builder-level authentication limits the attack surface, the potential for total database compromise makes this a critical security concern that must be addressed to protect backend data assets.