CVE-2024-46412

The Rebuild enterprise management system (version v3.7.7 ) is susceptible to an incorrect access control vulnerability within its prehandle function. This flaw allows an attacker to bypass authentication by sending a specially crafted GET request to the /commons/ip-location API endpoint. To remed...

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...