CVE-2025-50900

A security vulnerability exists in getrebuild/rebuild version 4.0.4 within the com.rebuild.web.RebuildWebInterceptor class. The flaw resides in the preHandle function, where the application uses CodecUtils.urlDecode(request.getRequestURI()) to decode the request path and checks if it ends with /e...