Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-5231
HistoryMar 02, 2017 - 8:59 p.m.

Directory traversal

2017-03-0220:59:00
PRIOn knowledge base
www.prio-n.com
6

0.002 Low

EPSS

Percentile

54.7%

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.

CPENameOperatorVersion
metasploitle4.13.19

0.002 Low

EPSS

Percentile

54.7%

Related for PRION:CVE-2017-5231