NaiboWang/EasySpider

NaiboWang/EasySpider

www.easyspider.net

Releases10

Frequency2 months 2 weeks

Last Release over 1 year ago

Stars44K

A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/网页爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-6746 ↗	Jul 15, 2024Monday, 15 July 2024, 12:15	4.3 MEDIUM	3.3 LOW
A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input /../../../../../../../../../Windows/win.ini leads to path traversal: '../filedir'. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier VDB-271477 was assigned to this vulnerability. NOTE: The code maintainer explains, that this is not a big issue "because the default is that the software runs locally without going through the Internet".