Multiple Vulnerabilities Affecting Four Rapid7 Products

Today, we'd like to announce eight vulnerabilities that affect four Rapid7 products, as described in the table below. While all of these issues are relatively low severity, we want to make sure that our customers have all the information they need to make informed security decisions regarding the...

CVE-2017-5228

The CVE-2017-5228 entry details a directory-traversal in Meterpreter stdapi Dir.download() affecting Rapid7 Metasploit prior to version 4.13.0-2017020701. An attacker could craft Meterpreter payloads to write to arbitrary directories on the Metasploit console with the permissions of the running i...