Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-1098

Rebuild proxy-download QiniuCloud.getStorageFile information disclosure

Description

A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252455.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Rebuild

  • 3.5.0affected
  • 3.5.1affected
  • 3.5.2affected
  • 3.5.3affected
  • 3.5.4affected
  • 3.5.5affected

References