CVE-2025-50900

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

CVE-2025-50900

A security vulnerability exists in getrebuild/rebuild version 4.0.4 within the com.rebuild.web.RebuildWebInterceptor class. The flaw resides in the preHandle function, where the application uses CodecUtils.urlDecode(request.getRequestURI()) to decode the request path and checks if it ends with /e...