Skip to main content

Metasploit CVE-2023-0599

MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2023-02-01 cve@rapid7.com
4.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.8 MEDIUM
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Feb 01, 2023 - 23:15 nvd
MEDIUM 4.8

DescriptionNVD

Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization.  Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator.

AnalysisAI

Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator. Affected products include: Rapid7 Metasploit.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

CVE-2020-7384 HIGH POC
7.8 Oct 29

Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish

CVE-2020-7350 HIGH POC
7.8 Apr 22

Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the

CVE-2020-7376 CRITICAL POC
9.8 Aug 24

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability

CVE-2020-7377 HIGH POC
7.5 Aug 24

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path tr

CVE-2019-5624 HIGH POC
7.3 Apr 30

Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Direct

CVE-2017-15084 MEDIUM POC
6.5 Oct 06

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22. Rated medium severity (CVSS 6

CVE-2020-7355 MEDIUM POC
6.1 Jun 25

Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows

CVE-2020-7354 MEDIUM POC
5.4 Jun 25

Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows

CVE-2017-5235 HIGH
7.8 Mar 02

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it i

CVE-2017-5244 LOW POC
3.5 Jun 15

Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Rated low sever

CVE-2017-5231 HIGH
7.1 Mar 02

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the

CVE-2017-5229 HIGH
7.1 Mar 02

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the

Share

CVE-2023-0599 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy