Skip to content
OpenAdvisories

Vendor

Baserow

5 known vulnerabilities.

Products

Baserow 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-113359

    Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint

    Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distin…

    Baserow Baserow
  • Medium 6.4
    CVE-2026-76837

    Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

    Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the first_name value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with …

    Baserow Baserow