CVE-2024-25294

CriticalCVSS 9.1

Published: 20/03/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

Summary

An SSRF vulnerability in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload, and URL parameters.

Risk Assessment

An attacker can exploit this vulnerability to perform attacks on internal network resources, steal data, or take control of the system.

Recommendation

Immediately update REBUILD to the latest version and restrict access to the proxyDownload and FileDownloader.java functions to trusted users only.

Original NVD description (English source)

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.