Rebuild vulnerabilities

2 known vulnerabilities in Rebuild from Getrebuild. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Rebuild: Improper Access Control

  CVE-2025-50900Aug 25, 2025Getrebuild

  An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecode(request.getRequestURI()) to obtain the URL-decoded

• 9.1 Critical severity

  rebuild: Server-Side Request Forgery

  CVE-2024-25294Mar 20, 2024Getrebuild

  An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.