CVE-2017-15084

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2017-10-06

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Metasploit (Rapid7)

References

• https://blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/