PT-2025-40785 · Rebuild · Rebuild

Blackspdier · CVE-2025-11276 · Published 2025-10-05 · Updated 2025-10-05

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Rebuild versions up to 4.1.3

Description A security flaw exists in Rebuild’s Comment/Guestbook component, potentially allowing for cross site scripting. Remote manipulation of an unknown functionality within the component can trigger this issue.

Recommendations Upgrade to version 4.1.4 to resolve this issue.

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2025-11276

Affected Products

Rebuild

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-11276 · Security Note
• https://gitee.com/getrebuild/rebuild/releases/tag/4.1.4 · Patch
• https://vuldb.com/?id.327010 · Note
• https://t.me/cveNotify/137398 · Telegram Post
• https://vuldb.com/?submit.658910 · Note
• https://twitter.com/CVEnew/status/1974667721121153183 · Twitter Post
• https://t.me/CVEtracker/34156 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1974669171133751517 · Twitter Post
• https://vuldb.com/?ctiid.327010 · Note