Multiple Vulnerabilities Affecting Four Rapid7 Products

Today, we'd like to announce eight vulnerabilities that affect four Rapid7 products, as described in the table below. While all of these issues are relatively low severity, we want to make sure that our customers have all the information they need to make informed security decisions regarding the...

CVE-2017-5229

Metasploit Meterpreter extapi Clipboard.parse_dump() has a directory traversal vulnerability (CVE-2017-5229) in all Metasploit editions prior to 4.13.0-2017020701. The underlying issue allows writing arbitrary files on the Metasploit console with the permissions of the running Metasploit instance...