Skip to content
OpenAdvisories

Vendor

crawlseo

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 4.4

    crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens

    crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long…

  • Medium 5.0

    crawlseo before 0.2.4 Server-Side Request Forgery via Crawler

    crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additi…