CyberSecBulletin

Getrebuild vulnerabilities

We track 2 vulnerabilities in Getrebuild products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2025.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest Getrebuild vulnerabilities

  • 9.8 Critical severity

    Rebuild: Improper Access Control

    CVE-2025-50900Getrebuild

    An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecode(request.getRequestURI()) to obtain the URL-decoded

  • 9.1 Critical severity

    rebuild: Server-Side Request Forgery

    CVE-2024-25294Getrebuild

    An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.