Skip to content
OpenAdvisories

Vendor

getrebuild

3 known vulnerabilities.

Products

rebuild 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-125372

    REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpoints

    REBUILD before 4.5.3 contains an authorization bypass vulnerability in FeedsListController fetchDetails and fetchComments that skips privilege filtering and FeedsHelper.checkReadable checks. Authenticated attackers can enumerate sequential IDs via the feeds-d…

    getrebuild rebuild
  • Medium 4.3
    CVE-2026-111667

    REBUILD through 4.5.0 Missing Authorization via /project/comments/list Endpoint

    REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a privat…

    getrebuild rebuild
  • Medium 5.9
    CVE-2026-110611

    REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

    REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-…

    getrebuild rebuild