Server side request forgery (ssrf)

2022-05-1517:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.

CPENameOperatorVersion
rebuildeq2.8.3

CPE	Name	Operator	Version
	rebuild	eq	2.8.3

References

github.com/getrebuild/rebuild/issues/460