CVE-2022-30049: SSRF
Published May 15, 2022
·Updated
A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
Affected Software
1 affected component
ruifang-tech Rebuild=2.8.3
Event History
May 15, 2022
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
Description
Frequently Asked Questions
1
What is CVE-2022-30049?
CVE-2022-30049 is a Server-Side Request Forgery (SSRF) vulnerability in Rebuild v2.8.3 that allows attackers to obtain the real IP address and scan Intranet information.
2
How does CVE-2022-30049 impact users?
CVE-2022-30049 allows attackers to obtain sensitive information and potentially perform further attacks.
3
What is the severity of CVE-2022-30049?
The severity of CVE-2022-30049 is high, with a CVSS score of 7.5.
4
How can I fix CVE-2022-30049?
To fix CVE-2022-30049, update Rebuild to version 2.8.4 or a later version, which includes a patch for the vulnerability.
5
Where can I find more information about CVE-2022-30049?
You can find more information about CVE-2022-30049 on the GitHub issue page: https://github.com/getrebuild/rebuild/issues/460.