CVE-2025-50900

A security vulnerability was identified in getrebuild/rebuild version 4.0.4 within the com.rebuild.web.RebuildWebInterceptor class. The preHandle function uses CodecUtils.urlDecode(request.getRequestURI()) to decode the request path and checks if it ends with /error to skip the interceptor; other...