Ruifang-tech
Ruifang-tech Rebuild: vulnerabilidades y CVE
Ruifang-tech Rebuild tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-28056 | Crítica (9.8) | 0.43% | — | 13 may 2025 | rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component. |
| CVE-2024-12995 | Media (5.3) | 0.43% | — | 28 dic 2024 | A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The… |
| CVE-2024-12990 | Media (5.3) | 0.34% | — | 27 dic 2024 | A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of the component Admin Verification Page. The manipulation of… |
| CVE-2024-12665 | Media (5.3) | 0.43% | — | 16 dic 2024 | A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site… |
| CVE-2024-12664 | Media (5.3) | 0.46% | — | 16 dic 2024 | A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to… |
| CVE-2024-1099 | Media (5.4) | 0.61% | — | 31 ene 2024 | A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site… |
| CVE-2024-1098 | Alta (7.5) | 1.1% | — | 31 ene 2024 | A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to… |
| CVE-2024-1021 | Crítica (9.8) | 35% | — | 29 ene 2024 | A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the function readRawText of the component HTTP Request Handler. The manipulation of the argument url… |
| CVE-2024-1020 | Media (6.1) | 0.58% | — | 29 ene 2024 | A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to… |
| CVE-2023-1613 | Media (6.1) | 0.52% | — | 23 mar 2023 | A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack… |
| CVE-2023-1612 | Crítica (9.8) | 0.74% | — | 23 mar 2023 | A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the… |
| CVE-2023-1610 | Crítica (9.8) | 0.68% | — | 23 mar 2023 | A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection.… |
| CVE-2023-1495 | Alta (8.8) | 0.71% | — | 19 mar 2023 | A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads… |
| CVE-2022-30049 | Alta (7.5) | 1.0% | — | 15 may 2022 | A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.