https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-50900.htmlhttps://patchthecve.com/cve/CVE-2025-50900.htmlWed, 17 Jun 2026 09:35:25 +0000CRITICAL 9.8: An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecode(request.getRequestURI()) to obtain the URL-decoded request path, and then determine whethehttps://patchthecve.com/cve/CVE-2024-46413.htmlhttps://patchthecve.com/cve/CVE-2024-46413.htmlWed, 17 Jun 2026 07:55:21 +0000MEDIUM 5.1: Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.https://patchthecve.com/cve/CVE-2025-28056.htmlhttps://patchthecve.com/cve/CVE-2025-28056.htmlWed, 17 Jun 2026 09:04:31 +0000CRITICAL 9.8: rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.https://patchthecve.com/cve/CVE-2024-12665.htmlhttps://patchthecve.com/cve/CVE-2024-12665.htmlWed, 17 Jun 2026 07:00:14 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2024-12664.htmlhttps://patchthecve.com/cve/CVE-2024-12664.htmlWed, 17 Jun 2026 07:00:14 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2024-25294.htmlhttps://patchthecve.com/cve/CVE-2024-25294.htmlThu, 09 Jul 2026 01:18:54 +0000CRITICAL 9.1: An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.