CVE-2024-1099: Rebuild read-raw getFileOfData cross site scripting
Published Jan 31, 2024
·Updated
A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252456.
Affected Software
1 affected component
ruifang-tech Rebuild<=3.5.5
Event History
Jan 31, 2024
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1099?
CVE-2024-1099 has been classified as problematic.
2
What kind of vulnerability is CVE-2024-1099?
CVE-2024-1099 is a cross site scripting vulnerability affecting the getFileOfData function.
3
How do I fix CVE-2024-1099?
To fix CVE-2024-1099, upgrade Rebuild to version 3.5.6 or later.
4
Can CVE-2024-1099 be exploited remotely?
Yes, CVE-2024-1099 can be exploited remotely.
5
Which versions of Rebuild are affected by CVE-2024-1099?
Versions of Rebuild up to and including 3.5.5 are affected by CVE-2024-1099.