← Database

CVE-2024-46412

MEDIUM CVSS: 6.5 Published: 2025-08-25 Modified: 2026-06-17

Description

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.

Affected Platforms

Unknown

Weakness Type

CWE-284

References