Lucene search
K

7 matches found

OSV
OSV
added 2024/01/31 12:16 p.m.9 views

CVE-2024-1099

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS6.2AI score
Exploits0References3
Prion
Prion
added 2024/01/31 12:16 p.m.14 views

Cross site scripting

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4CVSS6.5AI score0.00225EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2024/01/31 11:31 a.m.39 views

CVE-2024-1099

CVE-2024-1099 affects Rebuild up to version 3.5.5, specifically the getFileOfData function in /filex/read-raw. The vulnerability arises from unsafely manipulating the url argument, enabling cross-site scripting and allowing remote exploitation. Public exploits are indicated. Remediation/fix detai...

5.4CVSS5.2AI score0.00225EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/31 11:31 a.m.12 views

CVE-2024-1099 Rebuild read-raw getFileOfData cross site scripting

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4CVSS5.4AI score0.00225EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/01/31 11:31 a.m.8 views

CVE-2024-1099 Rebuild read-raw getFileOfData cross site scripting

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4CVSS6.2AI score0.00225EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.2 views

Rebuild Cross-Site Scripting Vulnerability

Rebuild is a highly customizable enterprise management system. A cross-site scripting vulnerability exists in Rebuild 3.5.5 and earlier versions, which stems from a security issue in the getFileOfData function of filex/read-raw, which can lead to cross-site scripting via the parameter url...

5.4CVSS6AI score0.00225EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/31 12:0 a.m.3 views

PT-2024-16682 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.5.5 Description: A vulnerability was found in the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross-site scripting. It is possible to launch the attack remotely. T...

5.4CVSS4.2AI score0.00225EPSS
Exploits1References8
Rows per page
Query Builder