Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to attacker-controlled servers, gaining full database access in cloud deployments.

Budibase Server versions before 3.41.3 contain a server-side request forgery (SSRF) vulnerability in the datasource verify endpoint. Builder-level users can supply arbitrary URLs without any SSRF validation, allowing them to direct requests to attacker-controlled servers. This flaw enables attackers to leak internal CouchDB credentials used by Budibase in cloud deployments. Successful exploitation grants full database access, posing a severe risk to cloud-hosted Budibase instances. The vulnerability is particularly dangerous because it requires only builder-level privileges, which may be accessible to a broader set of users. Organizations running Budibase in cloud environments should upgrade to version 3.41.3 or later immediately. No workaround is described beyond patching.