Vulnerabilities

TI-2025-32265 CVE-2025-50900 · GHSA-gpc3-m975-qqv3

An issue was discovered in getrebuild/rebuild 4.0.4.

HIGH 82

An issue was discovered in getrebuild/rebuild 4.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2025-08-25 No fix listed CWE-284

TI-2024-30956 CVE-2024-46413 · GHSA-x6f8-h6vp-666p

Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the…

MEDIUM 56

Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00268 Published 2025-08-25 No fix listed CWE-918

TI-2024-16676 CVE-2024-25294 · GHSA-268q-c8pq-99pj

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information…

MEDIUM 49

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0081 Published 2024-03-20 No fix listed CWE-918

TI-2023-02323 CVE-2023-2474 · GHSA-gfm4-vqf3-mc3m

Rebuild cross-site request forgery

LOW 20

A vulnerability has been found in Rebuild 3.2 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00376 Published 2023-05-02 No fix listed CWE-352

Vulnerabilities

Filters

An issue was discovered in getrebuild/rebuild 4.0.4.

Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the…

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information…

Rebuild cross-site request forgery