Lucene search
+L

5 matches found

NVD
NVD
•added 2024/03/20 9:15 p.m.•29 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

9.1CVSS7.2AI score0.0081EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•14 views

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild v.3.5 that stems from the presence of a Server Request Forgery SSRF vulnerability. The vulnerability can be exploited by an attacker to obtain sensitive information and execute arbitrary code...

9.1CVSS7.3AI score0.0081EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/03/20 12:00 a.m.•23 views

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

7.5AI score0.0081EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/20 12:00 a.m.•139 views

CVE-2024-25294

REBUILD v.3.5 is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists within the FileDownloader.java component, specifically involving the proxyDownload and URL parameters. A remote attacker can exploit this issue to obtain sensitive information and achieve arbitrary...

9.1CVSS7.4AI score0.0081EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-25294: Server-Side Request Forgery (SSRF)

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

9.1CVSS6.4AI score0.0081EPSS
SaveExploits0References2
Rows per page
Query Builder