A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. VDB-227866 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://gitee.com/getrebuild/rebuild/issues/I6W4M2 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.227866 | Permissions Required VDB Entry |
| https://vuldb.com/?id.227866 | VDB Entry |
Configurations
History
09 May 2023, 17:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| First Time |
Getrebuild
Getrebuild rebuild |
|
| CPE | cpe:2.3:a:getrebuild:rebuild:3.2:*:*:*:*:*:*:* | |
| References | (MISC) https://vuldb.com/?ctiid.227866 - Permissions Required, VDB Entry | |
| References | (MISC) https://vuldb.com/?id.227866 - VDB Entry | |
| References | (MISC) https://gitee.com/getrebuild/rebuild/issues/I6W4M2 - Exploit, Issue Tracking |
02 May 2023, 13:29
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-02 13:15
Updated : 2024-04-11 01:19
NVD link : CVE-2023-2474
Mitre link : CVE-2023-2474
CVE.ORG link : CVE-2023-2474
JSON object : View
Products Affected
getrebuild
- rebuild
CWE
CWE-352
Cross-Site Request Forgery (CSRF)