CVE-2023-1495 is a critical SQL injection vulnerability affecting Rebuild versions up to 3.2.3, specifically within the queryListOfConfig function in the /admin/robot/approval/list file. An attacker can remotely exploit this by manipulating the 'q' argument, leading to potential compromise of confidentiality, integrity, and availability. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low privileges. While a patch (c9474f84e5f376dd2ade2078e3039961a9425da7) has been released and exploit details are public, there is currently no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.2.3CPE matchmatch criteria | cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.