high7.0Public exploit code
CVE-2020-7384
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary com…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Metasploit Framework 6.0.11 - msfvenom APK template command injection2021-01-28 · local · multiple
Impact
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rapid7 | Metasploit | before 4.19.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/160004/Rapid7-Metasploit-Framework-msfvenom-APK-Template-Command-Injection.html
- http://packetstormsecurity.com/files/161200/Metasploit-Framework-6.0.11-Command-Injection.html
- https://github.com/rapid7/metasploit-framework/pull/14288
- http://packetstormsecurity.com/files/160004/Rapid7-Metasploit-Framework-msfvenom-APK-Template-Command-Injection.html
- http://packetstormsecurity.com/files/161200/Metasploit-Framework-6.0.11-Command-Injection.html
- https://github.com/rapid7/metasploit-framework/pull/14288