CVE-2022-30049

A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-05-15

Last modified

2024-08-03

Weaknesses

CWE-918

Affected products

• Rebuild (Ruifang-tech)

References

• https://github.com/getrebuild/rebuild/issues/460