PT-2025-34653 · Unknown · Rebuild 3.7.7

CVE-2024-46413

·

Published

2025-08-25

·

Updated

2025-08-25

CVSS v3.1

5.1

Medium

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Rebuild version 3.7.7
Description: The software contains a Server-Side Request Forgery (SSRF) issue. This occurs through the type parameter within the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex function.
Recommendations: Update to a newer version that contains a fix for this issue. As a temporary workaround, restrict access to the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex function until a patch is available.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-46413

Affected Products

Rebuild 3.7.7