CVE-2023-2474: Rebuild cross-site request forgery

Published May 2, 2023

Updated

A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. VDB-227866 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

getrebuild rebuild=3.2

Event History

May 2, 2023

CVE Published

via MITRE·12:31 PM

Data Sourced

via MITRE·12:31 PM

DescriptionSeverityWeakness

Data Sourced

01:15 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-2474?

CVE-2023-2474 is classified as a problematic vulnerability affecting Rebuild 3.2.

How do I fix CVE-2023-2474?

To address CVE-2023-2474, it is recommended to upgrade Rebuild to a patched version that mitigates the cross-site request forgery vulnerability.

What type of attack is associated with CVE-2023-2474?

CVE-2023-2474 is associated with cross-site request forgery attacks that can be initiated remotely.

Which software versions are affected by CVE-2023-2474?

CVE-2023-2474 affects Rebuild version 3.2.

Is CVE-2023-2474 publicly disclosed?

Yes, CVE-2023-2474 has been publicly disclosed and details about the exploit are available.