Read the docs

Baserow

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Baserow records in CISA KEV

No Baserow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Baserow 1 record LOW

Records

5 records

TI-2021-05241 CVE-2021-22255 · GHSA-h2jg-46xv-c74w

Server-side request forgery in Baserow

Priority LOW 36

SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01288 Published 2021-08-20 No fix listed CWE-918
TI-2026-76922 CVE-2026-113359 · GHSA-fm4f-3f67-2hgv

Missing authorization in Baserow exposes data across workspaces

Priority LOW 24

Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00339 Published 2026-10-20 Fixed in 2.3.0 CWE-639
Open these records in search →