.. / CVE-2024-1021

• SSRF
• PoC
• Nuclei
• Web

Exploit for Rebuild <= 3.5.5 - Server-Side Request Forgery (CVE-2024-1021)

Description:

Rebuild <= 3.5.5 is vulnerable to server-side request forgery (SSRF) due to improper validation of the url parameter in the readRawText function of the HTTP Request Handler component. This vulnerability allows an attacker to make unauthorized requests to internal resources.

Nuclei Template

View the template here CVE-2024-1021.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-1021.yaml

References: