Description (CNA)
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL template and interpolated directly into a PostgreSQL expression. The generated SQL executes through Baserow's database connection with the Baserow PostgreSQL role permissions, allowing data outside the user's workspace permissions to be read or modified.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Baserow / Baserow | affected 2.2.0 through 2.3.3 |
CWE
CWE-89
References
- https://fluidattacks.com/es/advisories/superestrella
- https://github.com/baserow/baserow
- https://github.com/baserow/baserow/commit/e7abc14975124dfe4558ff47fb8b9a25c47d9fcc
- https://github.com/baserow/baserow/releases/tag/2.3.4
ADP enrichment
No English description supplied.