CVE-2022-30049

2022-05-1517:15:07

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.

CPENameOperatorVersion
rebuildeq1.10.3
rebuildeq1.11.0
rebuildeq2.3.2
rebuildeq1.11.1
rebuildeq2.2.0-beta1
rebuildeq1.6.0
rebuildeq2.6.0
rebuildeq1.9.2
rebuildeq1.11.2
rebuildeq1.2.0-beta

Name	Operator	Version
rebuild	eq	1.10.3
rebuild	eq	1.11.0
rebuild	eq	2.3.2
rebuild	eq	1.11.1
rebuild	eq	2.2.0-beta1
rebuild	eq	1.6.0
rebuild	eq	2.6.0
rebuild	eq	1.9.2
rebuild	eq	1.11.2
rebuild	eq	1.2.0-beta

Rows per page:

1-10 of 551

References

github.com/getrebuild/rebuild/issues/460