medium6.5
CVE-2020-7383
A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & m…
Impact
A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rapid7 | Nexpose | before 6.6.49 |