Rebuild vulnerabilities
We track 7 vulnerabilities in Rebuild products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.
Latest Rebuild vulnerabilities
- 7.3 High severity
REBUILD: Missing Authorization
A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remot
- 7.3 High severity
Rebuild: Improper Authentication
A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The expl
- 7.5 High severity
Rebuild: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has b
- 9.8 Critical severity
Rebuild: Server-Side Request Forgery
A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the function readRawText of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The a
- 9.8 Critical severity
Rebuild: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclo
- 9.8 Critical severity
Rebuild: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The ex
- 8.8 High severity
Rebuild: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launc