CVE-2017-5231

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi…

published March 2, 2017

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01217 · 68.2th percentile
Published
2017-03-02T20:00Z
EPSS history
Timeline
  • 02 MAR 20:00Z
    All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi…
    cvelistv5