Skip to content
OpenAdvisories

Vendor

Crawl4AI

9 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.5

    Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server

    Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate moni…

  • Medium 6.1

    Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard

    Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping. An attacker can submit a crafted crawl request with malicious markup that executes i…