Security Advisory

CVE-2025-11195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-30 18:12:50

Last updated 2025-09-30 20:33:45

Assigner rapid7

CVSS score 3.3

State PUBLISHED

Description

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product.

← Browse all CVEs View on cve.org ↗