Skip to content
OpenAdvisories

Product · Rapid7

Appspider Pro

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-11195

    Rapid7 AppSpider Project Name Validation Bypass

    Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verifi…

    Rapid7 Appspider Pro
  • Low 3.3
    CVE-2025-36857

    Rapid7 Appspider Broken Access Control Vulnerability

    Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to other users or projects. Affected version…

    Rapid7 Appspider Pro