29Oca
CVE-2024-1020 | Rebuild up to 3.5.5 /filex/proxy-download getStorageFile url cross site scripting
A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the functiongetStorageFile
of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting.
This vulnerability is known as CVE-2024-1020. The attack can be launched remotely. Furthermore, there is an exploit available.