Skip to content

[GHSA-4qcj-m5wp-jmf4] Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings - #10990

Open
zuhairhalawa wants to merge 1 commit into
github:zuhairhalawa/advisory-improvement-10990from
zuhairhalawa:zuhairhalawa-GHSA-4qcj-m5wp-jmf4
Open

[GHSA-4qcj-m5wp-jmf4] Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings#10990
zuhairhalawa wants to merge 1 commit into
github:zuhairhalawa/advisory-improvement-10990from
zuhairhalawa:zuhairhalawa-GHSA-4qcj-m5wp-jmf4

[GHSA-4qcj-m5wp-jmf4] Budibase: Missing RBAC on GET /api/global/group…

2c38d0c
Select commit
Loading
Failed to load commit list.
Advisory Database / Processing advisory improvement succeeded Nov 7, 2026 in 1s

Processed advisory improvement

Thank you for contributing to GitHub's Advisory Database. Our Security Lab team will review your suggested advisory improvement for publication.

View more details on Advisory Database