CVE-2025-28056
- Source
- https://cve.org/CVERecord?id=CVE-2025-28056
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-28056.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-28056
- Published
- 2025-05-13T00:00:00Z
- Modified
- 2026-07-09T14:44:14.583377Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/28xxx/CVE-2025-28056.json", "cna_assigner": "mitre" }- References
Affected packages
Git / github.com/getrebuild/rebuild
Affected ranges
- Type
- GIT
- Repo
- https://github.com/getrebuild/rebuild
- Events
- Database specific
{ "source": [ "DESCRIPTION", "CPE_RANGE" ], "cpe": "cpe:2.3:a:ruifang-tech:rebuild:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "v3.9.0" }, { "fixed": "v3.9.3" }, { "introduced": "3.9.0" }, { "last_affected": "3.9.3" } ] }
Database specific
vanir_signatures_modified
"2026-07-09T14:44:14Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-28056.json"
vanir_signatures
[
{
"id": "CVE-2025-28056-03919897",
"digest": {
"function_hash": "116091989441474505557467025790238631062",
"length": 257.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "getIntParameter",
"file": "src/main/java/com/rebuild/web/BaseController.java"
}
},
{
"id": "CVE-2025-28056-10d9ccf6",
"digest": {
"line_hashes": [
"165883645320021552469245269410947725447",
"297183270709848936884207774532122684221",
"209457885369916278494164535466026484086",
"267320586106685508791768225335148620766",
"278613322088929746214572242400894156755",
"118925937606717277534494506325278190114",
"184768181151912364242055698432403585840",
"308958839790562068390480920284211740815",
"110617490815925855107563130367937516577",
"107572699190438922172632040345840003995",
"14182274831020068649185158585208750569",
"88264866283987229012517694569301282689",
"319707796777734891944481718987793104833",
"207770811823456743051086301826944756564",
"124613277145087142600337687885232400298",
"283165040632079477825129115012623700936",
"82864524128985843648311245101593265643",
"260345112526752202195689031192768763593",
"126105933967365163762952711425535969086",
"67285741456772442012070940876174401461"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/service/general/transform/RecordTransfomer39.java"
}
},
{
"id": "CVE-2025-28056-192554b6",
"digest": {
"function_hash": "190001456477350292825433109525909796579",
"length": 91.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "getIntParameter",
"file": "src/main/java/com/rebuild/web/BaseController.java"
}
},
{
"id": "CVE-2025-28056-1c1a7214",
"digest": {
"line_hashes": [
"49256750516928120390371648164856051164",
"175556738965381140290012483858262212540",
"266662263668463540109623649367256554698",
"233641692827439454067274498997081533133"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/commons/MetadataGetting.java"
}
},
{
"id": "CVE-2025-28056-21b44296",
"digest": {
"line_hashes": [
"48805565712963576301933886135816436324",
"21227217988696858551001178358598229383",
"229919495394515136327496537333283537116",
"115072351888013221095247845629837432330",
"21482671573732645233962205493383359213",
"218117305978725192736853283582621560877",
"290943621110823600600820623041997928668"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/BaseController.java"
}
},
{
"id": "CVE-2025-28056-2684ef80",
"digest": {
"function_hash": "262340131687053029651610282695491487979",
"length": 278.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "isSelf",
"file": "src/main/java/com/rebuild/core/privileges/UserHelper.java"
}
},
{
"id": "CVE-2025-28056-2b66d4b9",
"digest": {
"function_hash": "180681118541241481528340349504937729472",
"length": 217.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "isAdmin",
"file": "src/main/java/com/rebuild/core/privileges/UserHelper.java"
}
},
{
"id": "CVE-2025-28056-321803d6",
"digest": {
"line_hashes": [
"230558475638744312227826414804938484138",
"83685810023182573203495563871531977524",
"197058707743873844670651001256123262549",
"93432636932814033395979387611097754132"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/feeds/AnnouncementController.java"
}
},
{
"id": "CVE-2025-28056-3514876c",
"digest": {
"line_hashes": [
"205132137343658562584282197670559729681",
"134642284304352364062661063118173333895",
"147731436444410415387583692205170510899",
"49405614883725874506317311969547267319"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/feeds/FeedsListController.java"
}
},
{
"id": "CVE-2025-28056-37fe4c37",
"digest": {
"line_hashes": [
"157529771248308339263482246934747561486",
"253362857910187181786715051262302217094",
"38296954697926061712588808519576961156",
"171717677936982580803211753461494168652"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/commons/FileDownloader.java"
}
},
{
"id": "CVE-2025-28056-42dbd269",
"digest": {
"function_hash": "338622938048087458255650013739089550246",
"length": 3855.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "sendMail",
"file": "src/main/java/com/rebuild/core/support/integration/SMSender.java"
}
},
{
"id": "CVE-2025-28056-4d4e2841",
"digest": {
"function_hash": "211383005680466311856351403449328390386",
"length": 767.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "render",
"file": "src/main/java/com/rebuild/web/commons/BarCodeGeneratorController.java"
}
},
{
"id": "CVE-2025-28056-56548f4c",
"digest": {
"function_hash": "233752864519818155691820200239862920697",
"length": 3257.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "fetchFeeds",
"file": "src/main/java/com/rebuild/web/feeds/FeedsListController.java"
}
},
{
"id": "CVE-2025-28056-5c1e9366",
"digest": {
"function_hash": "322801160329015320122793454980959595052",
"length": 677.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "replaceWithRecord",
"file": "src/main/java/com/rebuild/core/support/general/ContentWithFieldVars.java"
}
},
{
"id": "CVE-2025-28056-698ead6a",
"digest": {
"function_hash": "33324701434868262441851639231869608147",
"length": 2301.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "preview",
"file": "src/main/java/com/rebuild/core/service/general/transform/RecordTransfomer39.java"
}
},
{
"id": "CVE-2025-28056-70b0b6be",
"digest": {
"function_hash": "157393224264165998563595632258537985832",
"length": 589.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "isActive",
"file": "src/main/java/com/rebuild/core/privileges/UserHelper.java"
}
},
{
"id": "CVE-2025-28056-75ad4b7f",
"digest": {
"function_hash": "57970440607094387451563092675509521640",
"length": 614.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "backup",
"file": "src/main/java/com/rebuild/core/support/setup/DatafileBackup.java"
}
},
{
"id": "CVE-2025-28056-77c274a2",
"digest": {
"function_hash": "119161369284112856057887482014171564170",
"length": 2296.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "announcementList",
"file": "src/main/java/com/rebuild/web/feeds/AnnouncementController.java"
}
},
{
"id": "CVE-2025-28056-7aee1f0d",
"digest": {
"line_hashes": [
"109168628051558397801064955833015602698",
"479106293508728544930475247744584780",
"293843499904363290074702803221042865004",
"27924688999440569000755359121247065705",
"292140527323171150276477166971755054481"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/Application.java"
}
},
{
"id": "CVE-2025-28056-7b1966e1",
"digest": {
"function_hash": "216866122513250678329349423146289897657",
"length": 2199.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "entityForm",
"file": "src/main/java/com/rebuild/web/general/GeneralModelController.java"
}
},
{
"id": "CVE-2025-28056-7b36bedc",
"digest": {
"line_hashes": [
"165639252414167295087023389206955991295",
"325284337231249599742177995120532597236",
"88891455815361392825485503676964136081",
"238017840427987747518867405354707092883",
"232524699805753459512790419290351634035",
"325160760879132324089735339413185182808",
"216601048705487166275117801205951967295",
"251616769799100049501583643756587445320",
"247522967893876749728415470940668925734",
"215742723919764650662712161378521943147",
"286393533485266894357665018689802088646",
"112971650056979201293179392871815353443",
"292198005258834450242170270218703408084",
"267353724458978887520033672936159236402"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/support/integration/SMSender.java"
}
},
{
"id": "CVE-2025-28056-7e21c32b",
"digest": {
"function_hash": "46196838311684817454003585128281363048",
"length": 754.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "fields",
"file": "src/main/java/com/rebuild/web/commons/MetadataGetting.java"
}
},
{
"id": "CVE-2025-28056-8423a6a2",
"digest": {
"function_hash": "133930447043213081660061071841127058096",
"length": 1249.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "saveDataItem",
"file": "src/main/java/com/rebuild/web/admin/metadata/ClassificationController.java"
}
},
{
"id": "CVE-2025-28056-8a1539c8",
"digest": {
"line_hashes": [
"233981500261716478339457238234352021977",
"292973607375222067541857148367598693944",
"142144201859632575867263502187247152645",
"315979872476406109904765090409163088710",
"291855290472681823401953693465159391609"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/user/signup/SignUpController.java"
}
},
{
"id": "CVE-2025-28056-8c04829b",
"digest": {
"function_hash": "190290627498520916694849279697266053047",
"length": 1179.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "listMessage",
"file": "src/main/java/com/rebuild/web/notification/NotificationController.java"
}
},
{
"id": "CVE-2025-28056-9fb7f7b4",
"digest": {
"line_hashes": [
"242184713476863953437812472600754814581",
"266195045206574810382061484576621039883",
"93803496856943737444340096529412189706",
"105111320418207371708518123852358551536",
"126696922530056879095255255379438713868",
"233652368884218803818467267656318452798",
"145689896811399792580871778889562826305",
"337606698029241394628137168170143635196",
"273599359494622336697655311961102808986",
"163193992802835521350643549808705414096",
"17462235622183067077932280396494656125",
"126126519311340262262335053028203607459",
"244464679802301704464872454816291935025",
"264483226805956227943824269809114855845",
"205145418399811581202555542758051179719",
"27019504876422949589367779731247016196",
"232483799127282597496012830791827741673",
"154467913025449434603069455244635305125",
"337698248748329135995451691796380427166",
"309213340966249104376826979061866502336",
"203008668448179291486806266831592406627",
"259114299525687372486361445571513748913",
"301045646320491717672278567894489864411",
"131049688419502982035506213244323957702",
"206852512176713225572111701068775968165",
"205213349391296966844642763858578526553",
"147106855999016418075709604605563665852",
"331161867020682561796547895726446866338",
"106937799000665088079170127359880041313",
"157155594979510251555096101999064689154",
"87117852992735716288610388609801257430",
"221103111757040622288519233067303585223",
"68341476877673290017343853343465007007",
"178861866158377909774495272982207970172",
"28880424726949957587017232037770851965",
"191570454305719773579307310302186957689",
"193244996009512962283926183521885006895",
"147274960746707356871128428852756003666",
"216109280540513438088857130965307965243",
"295770954597335136006857364773403392165",
"149241531652564362325596571183241580045",
"183412987286825129358831990731287135099",
"198149466930989796353273328222923065247",
"224038686980194829856955532525522681545",
"12861281061669688650726500259091252559",
"129520661279698410216116975263657678970"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/general/GeneralModelController.java"
}
},
{
"id": "CVE-2025-28056-a350f6f6",
"digest": {
"function_hash": "207610082012630878271865704039841484274",
"length": 1725.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "backup",
"file": "src/main/java/com/rebuild/core/support/setup/DatabaseBackup.java"
}
},
{
"id": "CVE-2025-28056-a6ba08a2",
"digest": {
"line_hashes": [
"136646996402403416017403861341486561137",
"33984461729994740474616253553660824424",
"28275204079400676618284232855301791564",
"323600335778119831763342289706187328107"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/notification/NotificationController.java"
}
},
{
"id": "CVE-2025-28056-a957f367",
"digest": {
"function_hash": "220673203373276879302091901911186514066",
"length": 5121.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "pageList",
"file": "src/main/java/com/rebuild/web/general/GeneralListController.java"
}
},
{
"id": "CVE-2025-28056-afde6d5d",
"digest": {
"function_hash": "285998057500758991264575103248895508652",
"length": 834.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "postSystemsBackup",
"file": "src/main/java/com/rebuild/web/admin/ConfigurationController.java"
}
},
{
"id": "CVE-2025-28056-b6ec97c3",
"digest": {
"line_hashes": [
"90876107647014114551905007190676859091",
"186057232030669044714985387637555033247",
"314694627211209997407874199230163306607",
"215649497411482004699691246427032129568"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/user/UserSettingsController.java"
}
},
{
"id": "CVE-2025-28056-b72808d2",
"digest": {
"function_hash": "97815461930756081468094334898873741488",
"length": 640.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "cancelExternalUser",
"file": "src/main/java/com/rebuild/web/user/UserSettingsController.java"
}
},
{
"id": "CVE-2025-28056-c77a472f",
"digest": {
"line_hashes": [
"281213512142662818980844756950525670663",
"252331128044749180350381781019530097837",
"33321431111582308372426993836768928887",
"100263219774137840378037052140691856002"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/commons/BarCodeGeneratorController.java"
}
},
{
"id": "CVE-2025-28056-c78fd4c8",
"digest": {
"function_hash": "56649871032762672368609055576633885269",
"length": 1897.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "replaceWithRecord",
"file": "src/main/java/com/rebuild/core/support/general/ContentWithFieldVars.java"
}
},
{
"id": "CVE-2025-28056-cc9fe36a",
"digest": {
"function_hash": "276209280869661443555054836069186667945",
"length": 363.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "getMailTemplate",
"file": "src/main/java/com/rebuild/core/support/integration/SMSender.java"
}
},
{
"id": "CVE-2025-28056-d523bbd7",
"digest": {
"line_hashes": [
"113903454115567229601721390860491544149",
"318754707378293648815006580475737708244",
"224185162255359871173730504235595630211",
"68291214231330430343520037901339841537"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/admin/metadata/ClassificationController.java"
}
},
{
"id": "CVE-2025-28056-e080c7e1",
"digest": {
"line_hashes": [
"153937280459129029951474979079372598373",
"280275587513369562619625743987922250296",
"93324247244097674113808840766912092251",
"142275906621867821177855904891527517191",
"146817291634525821501115831763712047600",
"189453334248714536082063481195624882004",
"128874243420968113284410858558120820864",
"28398999264331517107069217973209260687",
"226119033105625158531252232321764081674",
"290357740538684756310776922239420149729",
"37371909216522566788447532904474634250",
"121552783307298694897944556534773380744",
"216477912796087048423839127558330669739",
"226837118670970614662707957412241839698",
"235213169812281742801919077846921216437",
"259974834318475575927658468481874648755"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/support/general/ContentWithFieldVars.java"
}
},
{
"id": "CVE-2025-28056-e1829079",
"digest": {
"line_hashes": [
"146181175731646092047663745875786909513",
"161617109829481107099423350130232589746",
"188549630376888458189357549050297448850",
"187392270152626229634584669302926273095"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/support/setup/DatabaseBackup.java"
}
},
{
"id": "CVE-2025-28056-e2e894a0",
"digest": {
"line_hashes": [
"140642621899660729535258333263259370168",
"31617746112996585668157196502815134727",
"319062338218508251766555488229200053627",
"232038200127390284258397375890393051299",
"284874724579964826203070455137120546488",
"4077456753841158753179934052653090067",
"268387455259482840142709670151047784407",
"324132532437605361927122404521179874832",
"196356485060968144406374085633362204765",
"227018570706872387607004949959440492083",
"37026050251999667830352893818814595465",
"227191450345164110699295302090456349277",
"244894885103877312123608136143477176897",
"215135970102250741198066713611597953852",
"132455451072767767727839409885631496083",
"229585047902333283813575068861371016799",
"239792177483659761581948545153835311657",
"103609976994427063223334240905561637845"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/privileges/UserHelper.java"
}
},
{
"id": "CVE-2025-28056-f0b0c659",
"digest": {
"function_hash": "3460782400797611586143194542003480557",
"length": 550.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"function": "checkoutName",
"file": "src/main/java/com/rebuild/web/user/signup/SignUpController.java"
}
},
{
"id": "CVE-2025-28056-f53bfd95",
"digest": {
"line_hashes": [
"138336511943000431819364457917479152510",
"224441865638532596327992451962871205046",
"310328427526436826889143116702702953455",
"133633539168286748306895709017149998850"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/general/GeneralListController.java"
}
},
{
"id": "CVE-2025-28056-fbcca71f",
"digest": {
"line_hashes": [
"22608941166502493052953565828453353454",
"74942706111364304935807923962673312372",
"215002731405845335648335896783831258891",
"109077611097758833488808171382390017800",
"336136117029947780862666566975580576217",
"183795404689409690550981314745934698878",
"228987037177317904200625090260553957814",
"231236947073414830846657285246551226068",
"99444362461097682880380923935290021464",
"127915931826424778001931667350730298848",
"71936116658808160462604798388219214687",
"114144644444765541728860704996214502218"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/web/admin/ConfigurationController.java"
}
},
{
"id": "CVE-2025-28056-fc105185",
"digest": {
"line_hashes": [
"157955075599077399738791202761123474306",
"86457072153768129715045649192405765260",
"102161395165149221922474182337491919262",
"201286160087313649591572788797464480477",
"27894993454930673837939668431628290732",
"112724869553896024678846582437315286450",
"77143834250980679568810089146227831103"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/getrebuild/rebuild/commit/f0af10084978c15005339f25f226480c4e25dc83",
"deprecated": false,
"target": {
"file": "src/main/java/com/rebuild/core/support/setup/DatafileBackup.java"
}
}
]