CVE-2024-1099

A vulnerability was found in Rebuild up to 3.5.5. It has been classified as problematic. Affected is the function getFileOfData of the file /filex/read-raw. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252456.

• CWE-79

• https://vuldb.com/?ctiid.252456Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252456Third Party Advisory, VDB Entry
• https://www.yuque.com/mailemonyeyongjuan/tha8tr/dcilugg0htp973nxExploit, Third Party Advisory
• https://vuldb.com/?ctiid.252456Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252456Third Party Advisory, VDB Entry
• https://www.yuque.com/mailemonyeyongjuan/tha8tr/dcilugg0htp973nxExploit, Third Party Advisory

Published

Jan 31, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1098A vulnerability was found in Rebuild up to 3.5.5 and classif…7.5
• CVE-2024-10980The Element Pack Elementor Addons (Header Footer, Template L…5.4
• CVE-2024-10986GPT Academic version 3.83 is vulnerable to a Local File Read…8.8
• CVE-2024-10987A vulnerability was found in code-projects E-Health Care Sys…6.5
• CVE-2024-10988A vulnerability was found in code-projects E-Health Care Sys…9.1
• CVE-2024-10989A vulnerability classified as critical has been found in cod…6.5
• CVE-2024-10990A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2024-10991A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-10993A vulnerability, which was classified as critical, was found…8.8
• CVE-2024-10994A vulnerability has been found in Codezips Online Institute …8.8
• CVE-2024-10995A vulnerability was found in Codezips Hospital Appointment S…9.8
• CVE-2024-10996A vulnerability was found in 1000 Projects Bookstore Managem…9.8