Horizon Alert
Summary of the vulnerability and why it matters
This advisory concerns a critical vulnerability in the Budibase open-source low-code platform, specifically within its MySQL integration. The flaw allows attackers to execute multiple SQL commands, potentially leading to complete database compromise by injecting malicious code through user input. The main concern is confirming relevance and exposure to this technology.
- Malicious SQL commands can compromise databases.
- Low-code platforms are often internet-facing.
- Confirm relevance and exposure of Budibase.
Attack Path
How an attacker could exploit the issue
Attackers can leverage an exposed MySQL integration within Budibase, a low-code platform, to execute arbitrary SQL commands. By injecting malicious SQL through user-controlled input fields in applications built with Budibase, an attacker can gain complete control over the associated database. This vulnerability could lead to data theft, manipulation, or deletion.
- No privileges required for access.
- Injecting SQL via user input fields.
- Complete database compromise.
Live Threat
Current exploitation, exposure, and threat context
When supported by the advisory, the MySQL integration component in Budibase could allow attackers to execute multiple SQL statements, potentially leading to complete compromise of the associated database. This could occur when user input fields within applications built on Budibase are not properly sanitized, allowing for the injection of malicious SQL commands.
- Database contents at risk.
- Malicious SQL commands injected via input.
- Complete database compromise may occur.
Operational Fix
Recommended remediation, mitigation, and detection steps
Determining ownership for this critical vulnerability in Budibase's MySQL integration requires identifying which team manages the deployed Budibase instances and their associated databases. The first practical step is to locate all Budibase deployments, assess their exposure and business criticality, pinpoint the exact owner for each instance, and then develop a prioritized remediation plan.
- Application owners should manage the issue.
- Verify Budibase instances and their reachability.
- Plan remediation based on identified risk.
