CVE-2025-28056: SQL Injection
Published May 13, 2025
·Updated
rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
Affected Software
2 affected components
REBUILD REBUILD>=3.9.0<=3.9.3
ruifang-tech Rebuild>=3.9.0<=3.9.3
Event History
May 13, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-28056?
CVE-2025-28056 is classified as a critical SQL injection vulnerability.
2
How do I fix CVE-2025-28056?
To fix CVE-2025-28056, update Rebuild to version 3.9.4 or later.
3
What software versions are affected by CVE-2025-28056?
CVE-2025-28056 affects Rebuild versions 3.9.0 through 3.9.3.
4
What component is vulnerable in CVE-2025-28056?
The vulnerable component in CVE-2025-28056 is the /admin/admin-cli/exec of Rebuild.
5
What kind of vulnerability is CVE-2025-28056?
CVE-2025-28056 is a SQL injection vulnerability that can allow unauthorized database access.