CVE-2025-11195

Katalog CVE

CVSS 3.3 · Low EPSS 0,09%

Kerentanan Improper Input Validation pada rapid7 appspider pro. Skor CVSS 3.1 3.3 (Low) menurut rapid7.com.

Deskripsi (NVD)

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product.

Rincian

Terbit di NVD

30 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber rapid7.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,09% peluang dieksploitasi; lebih tinggi dari 0,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider advisory vendor