Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: getrebuild Clear all filters
TI-2026-75453 CVE-2026-111667 · GHSA-5cv6-8j9w-94rq

REBUILD Missing Authorization in Task Comment Listing Endpoint

Priority MEDIUM 57

REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00305 Published 2026-10-16 No fix listed CWE-639
TI-2026-74105 CVE-2026-110611 · GHSA-c434-7979-wrg6

Authorization bypass in REBUILD aibot2 chat endpoints

Priority MEDIUM 60

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00379 Published 2026-10-14 No fix listed CWE-639
TI-2023-02323 CVE-2023-2474 · GHSA-gfm4-vqf3-mc3m

Rebuild cross-site request forgery

Priority LOW 20

A vulnerability has been found in Rebuild 3.2 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00376 Published 2023-05-02 No fix listed CWE-352