CVE-2026-103757 | Budibase up to 3.41.0 File Utils fileUtils.ts uploadUrl server-side request forgery

October 1, 2026 Yanac

A vulnerability identified as problematic has been detected in Budibase up to 3.41.0. Affected is the function uploadUrl of the file packages/server/src/utilities/fileUtils.ts of the component File Utils. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-103757. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More