CVE-2024-6746 Scanner
CVE-2024-6746 scanner - Arbitrary File Read vulnerability in EasySpider
Used 2.9k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-6746
5.3
CVSSmedium
Exploitable from an adjacent network · no authentication required.
Description
A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input /../../../../../../../../../Windows/win.ini leads to path traversal: '../filedir'. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier VDB-271477 was assigned to this vulnerability. NOTE: The code maintainer explains, that this is not a big issue "because the default is that the software runs locally without going through the Internet".
Attack Vector
Adjacent
Privileges Req.
None
User Interaction
None
easyspider
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: easyspider
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →