Budibase Server Credential Exposure via Unredacted Datasource Updates

Executive Summary

Budibase Server before version 3.45.0 does not redact plaintext datasource credentials when broadcasting external table updates to the Builder collaboration websocket room. Attackers with Builder access can intercept unredacted datasource objects containing sensitive information like database passwords and API keys during table save or delete operations.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for unredacted datasource credentials in Builder collaboration websocket communications. Check Budibase server logs for plaintext credential exposure during table save or delete operations. Inspect websocket messages in the Builder collaboration room for exposed database passwords or API keys.

Useful 0 Not Useful 0

Impact Analysis

If you use Budibase Server versions before 3.45.0, attackers with Builder access could steal your database passwords and API keys. This could lead to unauthorized access to your databases, data breaches, or further attacks on connected systems.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. It may result in data breaches, non-compliance fines, and reputational damage due to exposure of personal or health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade Budibase Server to version 3.45.0 or later to address the credential redaction issue. Restrict Builder access to only trusted users to limit exposure. Review and rotate any exposed database passwords or API keys that may have been transmitted via websocket communications.

Useful 0 Not Useful 0