Advisories · Technology
Baserow.
Every CVE that names Baserow among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint
- Baserow
- Broken access control
- CVSS 8.6 High
Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
- Baserow
- SQL injection
- CVSS 8.7 High
Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources
- Baserow
- Broken access control
- CVSS 5.3 Medium
Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name
- Baserow
- Cross-site scripting (XSS)
- CVSS 2.1 Low
Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer improper authorization
- Baserow
- Privilege escalation
- Broken access control
- CVSS 2.3 Low
Baserow 2FA Verify Endpoint views.py verify improper authentication
- Baserow
- Authentication bypass
- CVSS 7.7 High
Baserow: SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve…
- Baserow