Vulnerabilidades do Rapid7 Metasploit

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Rapid7 Metasploit: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:rapid7:metasploit

CVE-2019-5645 Alta · 7.5 CWE-400 01/09/2020

Rapid7 Metasploit HTTP Handler Denial of Service

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.