Description
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.
References
github.com/...hting/rebuild-vulns/blob/main/rebuild 3.7.7.md
github.com/...-fighting/CVE-vulns/blob/main/rebuild 3.7.7.md