What’s Vulnerable › Vulnerabilities

CVE-2022-3225: Improper Control of Dynamically-Managed Code Resources in budibase/budibase

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-16 · updated 2026-06-17
• Weakness: CWE-913

Description

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

Affected products

• budibase: before 1.3.20 — fixed in 1.3.20

How to fix

Upgrade to a fixed version: budibase 1.3.20. Check the vendor advisory for mitigations.

References

• https://github.com/budibase/budibase/commit/d35864be0854216693a01307f81ffcabf6d549df
• https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245
• https://github.com/budibase/budibase/commit/d35864be0854216693a01307f81ffcabf6d549df
• https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245

Get alerted when CVE-2022-3225 or the next vulnerability affects your stack