PT-2025-40014 · Rapid7 · Appspider Pro

Published 2025-09-30 · Updated 2025-09-30 · CVE-2025-11195

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rapid7 AppSpider Pro versions prior to 7.5.021

Description Rapid7 AppSpider Pro versions below 7.5.021 have a project name validation issue. An attacker can modify the project name directly in the configuration file to a name that already exists due to insufficient verification of project name uniqueness when editing outside the application.

Recommendations Update to version 7.5.021 or later.

Fix

Insufficient Verification of Data Authenticity

RCE

Weakness Enumeration

CWE-345

CWE-20

Related Identifiers

CVE-2025-11195

Affected Products

Appspider Pro

References · 6

• https://osv.dev/vulnerability/CVE-2025-11195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11195 · Security Note
• https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider · Vendor Advisory
• https://t.me/CVEtracker/33748 · Telegram Post
• https://twitter.com/CVEnew/status/1973097283664171136 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1973117792221086086 · Twitter Post