• caglararli@hotmail.com
  • 05386281520

CVE-2024-25294 | Rebuild 3.5 URL Parameter FileDownloader.java proxyDownload server-side request forgery

Çağlar Arlı      -    10 Views

CVE-2024-25294 | Rebuild 3.5 URL Parameter FileDownloader.java proxyDownload server-side request forgery

A vulnerability has been found in Rebuild 3.5 and classified as critical. This vulnerability affects the function proxyDownload of the file FileDownloader.java of the component URL Parameter Handler. The manipulation leads to server-side request forgery. This vulnerability was named CVE-2024-25294. The attack can be initiated remotely. There is no exploit available.