Getrebuild

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    2
    Critical Level Threats
    0
    High Level Threats
    5
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-111667

    REBUILD through 4.5.0 Missing Authorization via /project/comments/list Endpoint

    Last Modified: Oct 16, 2026
    Published: Oct 16, 2026

    CVE-2026-110611

    REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

    Last Modified: Oct 20, 2026
    Published: Oct 14, 2026

    CVE-2025-11276

    Rebuild Comment/Guestbook cross site scripting

    Last Modified: Apr 15, 2026
    Published: Oct 05, 2025

    CVE-2025-50900

    An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecode(request.getRequestURI()) to obtain the URL-decoded request path, and then determine whether the path endsWith /error. If so, execute return true to skip this Interceptor. Else, redirect to /user/login api. Allowing unauthenticated attackers to gain sensitive information or escalated privileges.

    Last Modified: Oct 09, 2025
    Published: Aug 25, 2025

    CVE-2024-46413

    Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.

    Last Modified: Sep 12, 2025
    Published: Aug 25, 2025
    Items Per Page
    Getrebuild Vulnerabilities & Security CVEs | CVE-DB