Rapid7 Metasploit vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Rapid7 Metasploit: 1 record(s), with affected versions and fixes.
cpe:2.3:a:rapid7:metasploit

CVE-2019-5645 High · 7.5 CWE-400 Sep 1, 2020

Rapid7 Metasploit HTTP Handler Denial of Service

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.