Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

VectorNETWORK

PublishedSep 16, 2022, 17:15

Published Bysecurity@huntr.dev

Base Score

Score5.7

Package (Ecosystem)IntroducedFixedLimit

@budibase/worker(npm)01.3.20N/A

@budibase/builder(npm)01.3.20N/A

@budibase/bbui(npm)01.3.20N/A

CWE-913

Base Score

5.7

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK