Lucene search
+L

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

🗓️ 16 Jun 2017 16:39:42Reported by shuckinsType 
rapid7community
 rapid7community
🔗 community.rapid7.com👁 176 Views

Security vulnerability in Metasploit Pro, Express, and Community editions patched in Metasploit v4.14.0. Lack of CSRF protection for stopping tasks allowed GET requests, posing risk of unauthorized stoppage of tasks by attackers

Related
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2017-5244
18 Dec 202313:18
circl
cnvd
CNVD
Rapid7 Metasploit Editions Cross-Site Scripting Vulnerability
22 Jun 201700:00
cnvd
cve
CVE
CVE-2017-5244
15 Jun 201714:00
cve
cvelist
Cvelist
CVE-2017-5244
15 Jun 201714:00
cvelist
euvd
EUVD
EUVD-2017-14349
7 Oct 202500:30
euvd
nvd
NVD
CVE-2017-5244
15 Jun 201714:29
nvd
openvas
OpenVAS
Metasploit Cross Site Request Forgery Vulnerability - Linux
30 Aug 201700:00
openvas
openvas
OpenVAS
Metasploit Cross Site Request Forgery Vulnerability - Windows
30 Aug 201700:00
openvas
osv
OSV
CVE-2017-5244
15 Jun 201714:29
osv
prion
Prion
Cross site request forgery (csrf)
15 Jun 201714:29
prion
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2017 16:39Current
5Medium risk
Vulners AI Score5
EPSS0.00716
176