Multiple Vulnerabilities Affecting Four Rapid7 Products

Today, we'd like to announce eight vulnerabilities that affect four Rapid7 products, as described in the table below. While all of these issues are relatively low severity, we want to make sure that our customers have all the information they need to make informed security decisions regarding the...

CVE-2017-5231

CVE-2017-5231 affects Rapid7 Metasploit (Meterpreter stdapi CommandDispatcher.cmd_download) where a directory traversal flaw in pre-4.13.0-2017020701 builds allows writing to an arbitrary directory on the Metasploit console with the running process permissions. Connected documents corroborate the...