CVE-2022-30049

A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.

• CWE-918

• https://github.com/getrebuild/rebuild/issues/460Exploit, Issue Tracking, Third Party Advisory
• https://github.com/getrebuild/rebuild/issues/460Exploit, Issue Tracking, Third Party Advisory

Published

May 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30037XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and …7.2
• CVE-2022-3004Cross-site Scripting (XSS) - Stored in GitHub repository yet…5.4
• CVE-2022-30040Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow.…7.5
• CVE-2022-30045An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…6.5
• CVE-2022-30047Mingsoft MCMS v5.2.7 was discovered to contain a SQL injecti…9.8
• CVE-2022-30048Mingsoft MCMS 5.2.7 was discovered to contain a SQL injectio…9.8
• CVE-2022-3005Cross-site Scripting (XSS) - Stored in GitHub repository yet…5.4
• CVE-2022-30050Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting…6.1
• CVE-2022-30052In Home Clean Service System 1.0, the password parameter is …9.8
• CVE-2022-30053In Toll Tax Management System 1.0, the id parameter appears …9.8
• CVE-2022-30054In Covid 19 Travel Pass Management 1.0, the code parameter i…9.8
• CVE-2022-30055Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerab…9.8