Highmjashanks

**Name of the Vulnerable Software and Affected Versions** Budibase Server versions prior to 3.41.3 **Description** A server-side request forgery (SSRF) issue exists in the datasource verify endpoint. This allows users with builder-level permissions to provide arbitrary URLs that are not properly validated. An attacker can use this to leak internal CouchDB credentials by directing requests to a server under their control, potentially leading to full database access in cloud deployments. **Recommendations** Update Budibase Server to version 3.41.3 or later. Restrict access to the datasource verify endpoint to minimize the risk of exploitation.