Medium severity6.5NVD Advisory· Published Aug 25, 2025· Updated Apr 15, 2026

CVE-2024-46412

Description

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location.

Affected products

RacerZ Fighting/Rebuild Vulnsreferences

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/RacerZ-fighting/CVE-vulns/blob/main/rebuild%203.7.5.mdnvd
github.com/RacerZ-fighting/rebuild-vulns/blob/main/rebuild%203.7.7.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000