漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Rapid7 AppSpider Project Name Validation Bypass
Vulnerability Description
Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
输入验证不恰当
Vulnerability Title
Rapid7 AppSpider Pro 数据伪造问题漏洞
Vulnerability Description
Rapid7 AppSpider Pro是美国Rapid7公司的一种动态应用程序安全测试解决方案,可让您扫描 Web 和移动应用程序的漏洞。 Rapid7 AppSpider Pro 7.5.021之前版本存在数据伪造问题漏洞,该漏洞源于项目名称验证不足,可能导致项目名称冲突。
CVSS Information
N/A
Vulnerability Type
N/A