CVE-2024-1020

Summary

CVE-2024-1020 is a newly disclosed vulnerability affecting Rebuild up to version 3.5.5. The issue lies within the getStorageFile function located in the /filex/proxy-download file. An attacker can exploit this vulnerability by manipulating the url argument, resulting in cross-site scripting (XSS). This attack can be launched remotely, making it a significant security concern. The exploit for this vulnerability has been made public, increasing the risk of potential exploitation. Vulnerability Database has assigned the identifier VDB-252289 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.