CVE-2026-82245 - Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/* endpoints to disable premium features and downgrade deployments for all users. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-81767 [高危] CVE-2026-81767 - Unauthenticated Broken Access Control in Simple Payme…
• CVE-2026-81761 [中危] CVE-2026-81761 - Subscriber Broken Access Control in WpEvently
• CVE-2026-81759 [中危] CVE-2026-81759 - Contributor Broken Access Control in WpEvently
• CVE-2026-81284 [中危] CVE-2026-81284 - Contributor Broken Access Control in ACF Extended
• CVE-2026-82245 [高危] CVE-2026-82245 - Budibase before 3.41.3 fails to enforce role-based au…
• CVE-2026-82242 [高危] CVE-2026-82242 - Budibase versions before 3.41.3 contain a missing aut…
• CVE-2026-82240 [高危] CVE-2026-82240 - Budibase before 3.41.3 fails to validate app-scoped b…
• CVE-2026-82239 [高危] CVE-2026-82239 - Budibase before 3.41.3 fails to enforce per-table rol…