PT-2023-17116 · Rebuild · Rebuild
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Rebuild versions up to 3.2.3
Description
A critical issue has been found in Rebuild, affecting some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely.
Recommendations
For Rebuild versions up to 3.2.3, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider restricting access to the /project/tasks/list file until a patch is available.
Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rebuild