Vulnerabilities

TI-2026-76922 CVE-2026-113359 · GHSA-fm4f-3f67-2hgv

Missing authorization in Baserow exposes data across workspaces

LOW 24

Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00339 Published 2026-10-20 Fixed in 2.3.0 CWE-639

TI-2026-16020 CVE-2026-19754 · GHSA-389p-g792-49fp

Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction

HIGH 72

Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00392 Published 2026-09-02 No fix listed CWE-89

TI-2026-56155 CVE-2026-81335 · GHSA-h84g-8x85-mw8v

Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

MEDIUM 44

Baserow dispatches an Application Builder data source without acting on the result of its permission check.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00575 Published 2026-08-27 Fixed in 2.3.1 CWE-862

TI-2026-53673 CVE-2026-76837 · GHSA-6jjx-jh3j-cxqj

Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

LOW 24

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-24 Fixed in 2.3.0 CWE-79

TI-2021-05241 CVE-2021-22255 · GHSA-h2jg-46xv-c74w

Server-side request forgery in Baserow

LOW 36

SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01288 Published 2021-08-20 No fix listed CWE-918