Approved changes feed: RSS · Atom
cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ruifang Tech (ab790a4b-9673-5b44-a229-2bade5b33b24) |
|---|---|
| Product | Rebuild (c92f79dd-e47d-5820-9342-23f8a665ab42) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/getrebuild/rebuild |
purl2cpe | 2026-06-01 10:17:42.058411 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-28056 |
vulnerable | 2026-06-08 07:14:55.984234 |
Details available
rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
Published: 2025-05-13T00:00:00.000Z
Updated: 2025-05-14T14:04:17.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1099 |
vulnerable | 2026-06-08 06:25:39.249804 |
Rebuild read-raw getFileOfData cross site scripting
LOW (3.5)
A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252456.
Published: 2024-01-31T11:31:05.389Z
Updated: 2024-08-23T19:26:33.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1098 |
vulnerable | 2026-06-08 06:25:39.249145 |
Rebuild proxy-download QiniuCloud.getStorageFile information disclosure
MEDIUM (4.3)
A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252455.
Published: 2024-01-31T11:31:04.316Z
Updated: 2025-05-29T15:04:07.376Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1021 |
vulnerable | 2026-06-08 06:25:39.014445 |
Rebuild HTTP Request readRawText server-side request forgery
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the function readRawText of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252290 is the identifier assigned to this vulnerability.
Published: 2024-01-29T22:00:08.338Z
Updated: 2025-06-06T20:16:06.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1020 |
vulnerable | 2026-06-08 06:25:39.012326 |
Rebuild proxy-download getStorageFile cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252289 was assigned to this vulnerability.
Published: 2024-01-29T21:31:04.591Z
Updated: 2024-10-18T14:11:55.989Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12995 |
vulnerable | 2026-06-08 06:25:36.481403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12990 |
vulnerable | 2026-06-08 06:25:36.475345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12665 |
vulnerable | 2026-06-08 06:25:35.869128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12664 |
vulnerable | 2026-06-08 06:25:35.866702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1613 |
vulnerable | 2026-06-08 05:52:36.191727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1612 |
vulnerable | 2026-06-08 05:52:36.191207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1610 |
vulnerable | 2026-06-08 05:52:36.184877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1495 |
vulnerable | 2026-06-08 05:52:36.005477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.