PT-2023-19762 · Rebuild · Rebuild

南风过境-梦至西洲 · Publicado 2023-05-02 · Atualizado 2024-05-17 · CVE-2023-2474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Rebuild version 3.2

Description A vulnerability has been found and classified as problematic, affecting unknown code and leading to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations To resolve the issue, change the configuration settings. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-2474

Produtos afetados

Rebuild

Referências · 6

• 🔥 https://gitee.com/getrebuild/rebuild/issues/I6W4M2 · Exploit
• https://t.me/cibsecurity/63152 · Publicação no Telegram
• https://vuldb.com/?id.227866 · Nota
• https://osv.dev/vulnerability/CVE-2023-2474 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-2474 · Nota de Segurança
• https://vuldb.com/?ctiid.227866 · Nota