TI-2025-32265 CVE-2025-50900 · GHSA-gpc3-m975-qqv3
An issue was discovered in getrebuild/rebuild 4.0.4.
Priority HIGH 82
An issue was discovered in getrebuild/rebuild 4.0.4.
getrebuild
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
getrebuild records in CISA KEVNo getrebuild vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-74105 CVE-2026-110611 · GHSA-c434-7979-wrg6
Authorization bypass in REBUILD aibot2 chat endpoints
Priority MEDIUM 60
REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership.
TI-2026-75453 CVE-2026-111667 · GHSA-5cv6-8j9w-94rq
REBUILD Missing Authorization in Task Comment Listing Endpoint
Priority MEDIUM 57
REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks.
TI-2024-30956 CVE-2024-46413 · GHSA-x6f8-h6vp-666p
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the…
Priority MEDIUM 56
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.
TI-2024-16676 CVE-2024-25294 · GHSA-268q-c8pq-99pj
An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information…
Priority MEDIUM 49
An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.
TI-2023-02323 CVE-2023-2474 · GHSA-gfm4-vqf3-mc3m
Rebuild cross-site request forgery
Priority LOW 20
A vulnerability has been found in Rebuild 3.2 and classified as problematic.