Low severity3.5NVD Advisory· Published Jan 29, 2024· Updated Jun 17, 2026
CVE-2024-1020
CVE-2024-1020
Description
A vulnerability classified as problematic was found in Rebuild up to 3.5.5. Affected by this vulnerability is the function getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252289 was assigned to this vulnerability.
Affected products
2Patches
Vulnerability mechanics
References
3- www.yuque.com/mailemonyeyongjuan/tha8tr/gdd3hiwz8uo6ylabnvdExploitThird Party Advisory
- vuldb.comnvdPermissions RequiredThird Party Advisory
- vuldb.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.