Medium · 6.5 CVE-2024-46412 EUVD-2024-54909GHSA-c45j-v7f7-m96f

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request se…

Published Aug 25, 2025 · Updated Aug 26, 2025 · Assigned by mitre

Description

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.

References

https://github.com/RacerZ-fighting/rebuild-vulns/blob/main/rebuild%203.7.7.md
https://github.com/RacerZ-fighting/CVE-vulns/blob/main/rebuild%203.7.5.md