medium5.1
CVE-2024-46413
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loa…
Impact
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getrebuild | Rebuild | through 3.7.7 |