CVE-2026-25043

{"id": "CVE-2026-25043", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25043", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T16:05:27.831255Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Budibase", "product": "budibase", "versions": [{"status": "affected", "version": "< 3.23.25"}]}]}], "published": "2026-04-03T16:16:35.607", "references": [{"url": "https://github.com/Budibase/budibase/commit/21bc3f812b2312f082f7683c2abc22d1ecc880c7", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Budibase/budibase/security/advisories/GHSA-277c-prw2-rqgh", "tags": ["Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "Budibase is an open-source low-code platform. Prior to version 3.23.25, a business logic vulnerability exists in Budibase\u2019s password reset functionality due to the absence of rate limiting, CAPTCHA, or abuse prevention mechanisms on the \u201cForgot Password\u201d endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email address, resulting in hundreds of password reset emails being sent in a short time window. This enables large-scale email flooding, user harassment, denial of service (DoS) against user inboxes, and potential financial and reputational impact for Budibase. This issue has been patched in version 3.23.25."}, {"lang": "es", "value": "Budibase es una plataforma de c\u00f3digo abierto de bajo c\u00f3digo. Antes de la versi\u00f3n 3.23.25, existe una vulnerabilidad de l\u00f3gica de negocio en la funcionalidad de restablecimiento de contrase\u00f1a de Budibase debido a la ausencia de limitaci\u00f3n de tasa, CAPTCHA o mecanismos de prevenci\u00f3n de abuso en el endpoint 'Olvid\u00e9 mi contrase\u00f1a'. Un atacante no autenticado puede activar repetidamente solicitudes de restablecimiento de contrase\u00f1a para la misma direcci\u00f3n de correo electr\u00f3nico, resultando en el env\u00edo de cientos de correos electr\u00f3nicos de restablecimiento de contrase\u00f1a en un corto per\u00edodo de tiempo. Esto permite la inundaci\u00f3n masiva de correos electr\u00f3nicos, el acoso a usuarios, la denegaci\u00f3n de servicio (DoS) contra las bandejas de entrada de los usuarios, y un potencial impacto financiero y reputacional para Budibase. Este problema ha sido parcheado en la versi\u00f3n 3.23.25."}], "lastModified": "2026-07-24T22:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:budibase:budibase:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08D73E1B-557B-4CEA-9DA0-3A46C8B9B5F4", "versionEndExcluding": "3.23.25"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}