All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-73300
CRITICALpublished 2026-08-12 18:18 UTC · 9 hours ago
9.6
CVSS / 10
// description
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading to complete database compromise. This vulnerability is fixed in 3.40.0.
// weaknesses (CWE)
- CWE-89