CVE-2024-1020: Rebuild proxy-download getStorageFile cross site scripting
Published Jan 29, 2024
·Updated
A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252289 was assigned to this vulnerability.
Affected Software
1 affected component
ruifang-tech Rebuild<=3.5.5
Event History
Jan 29, 2024
CVE Published
via MITRE·09:31 PM
Data Sourced
via MITRE·09:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1020?
CVE-2024-1020 is classified as a problematic vulnerability.
2
How do I fix CVE-2024-1020?
To fix CVE-2024-1020, update Rebuild to version 3.5.6 or later.
3
What type of vulnerability is CVE-2024-1020?
CVE-2024-1020 is a cross-site scripting (XSS) vulnerability.
4
Which software versions are affected by CVE-2024-1020?
CVE-2024-1020 affects all versions of Rebuild up to 3.5.5.
5
Can CVE-2024-1020 be exploited remotely?
Yes, CVE-2024-1020 can be exploited remotely by manipulating the url argument.