EDB-42961
functionalMetasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery
view exploit source exploit_dbverifiedtype webappsauthor Dhiraj Mishrapublished 2017-08-30catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-15084US | medium6.5 | Exploit | ||
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan