medium6.5Public exploit code
CVE-2017-15084
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery2017-08-30 · webapps · ruby · Verified
Impact
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rapid7 | Metasploit | through 4.14.1 |