Budibase open-source low-code platform contains a Server-Side Request Forgery (SSRF) vulnerability in its REST datasource integration. The vulnerability allows authenticated Builder users to bypass IP blacklists by following HTTP redirects without re-validation. Attackers can redirect through controlled servers to access internal services, cloud metadata, and databases. The issue affects versions prior to 3.38.1 and has been patched in version 3.38.1. This represents a significant security risk for organizations using Budibase in cloud environments.