CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2024-1020 – Rebuild proxy-download getStorageFile cross site scripting
https://notcve.org/view.php?id=CVE-2024-1020
A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?ctiid.252289 https://vuldb.com/?id.252289 https://www.yuque.com/mailemonyeyongjuan/tha8tr/gdd3hiwz8uo6ylab • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1613 – Rebuild publish cross site scripting
https://notcve.org/view.php?id=CVE-2023-1613
A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/getrebuild/rebuild/issues/596 https://vuldb.com/?ctiid.223744 https://vuldb.com/?id.223744 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1612 – Rebuild list-file sql injection
https://notcve.org/view.php?id=CVE-2023-1612
A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/getrebuild/rebuild/issues/598 https://vuldb.com/?ctiid.223743 https://vuldb.com/?id.223743 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1610 – Rebuild list sql injection
https://notcve.org/view.php?id=CVE-2023-1610
A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/getrebuild/rebuild/issues/597 https://vuldb.com/?ctiid.223742 https://vuldb.com/?id.223742 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1495 – Rebuild list queryListOfConfig sql injection
https://notcve.org/view.php?id=CVE-2023-1495
A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/getrebuild/rebuild/commit/c9474f84e5f376dd2ade2078e3039961a9425da7 https://github.com/getrebuild/rebuild/issues/594 https://vuldb.com/?ctiid.223381 https://vuldb.com/?id.223381 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •