Read the docs
TI-2019-04008 Aliases CVE-2019-5645GHSA-wp3v-g466-8g44

Rapid7 Metasploit HTTP Handler Denial of Service

Priority MEDIUM 64CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.

Why it matters now

EPSS 0.49181 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Rapid7Metasploit Frameworkup to 5.0.27—No fix listedCNA
  • Metasploit Framework VendorRapid7 Affected up to 5.0.27 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*up to 5.0.27VulnerableRapid7
  • cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:* Versions up to 5.0.27 Vulnerable ·Rapid7

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5645
  2. 2026-10-03 Alias added: GHSA-wp3v-g466-8g44
  3. 2026-10-23 Affected versions changed · CNA
  4. 2026-10-23 2 new references · CNA

References

Exploit 1

Patch 2

  • TI-2020-05967 Client-Side Command Injection in Rapid7 Metasploit CVSS 3.1HIGH 7.8
  • TI-2020-05961 Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module CVSS 3.1CRITICAL 9.8
  • TI-2020-05968 Metasploit Framework 'drb_remote_codeexec' code execution CVSS 3.1HIGH 8.8
  • TI-2020-05944 Metasploit Framework Plugin Libnotify Command Injection CVSS 3.1HIGH 7.8
  • TI-2020-05962 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module CVSS 3.1HIGH 8.1
  • TI-2019-03989 Rapid7 Metasploit Framework Zip Import Directory Traversal CVSS 3.1HIGH 7.3
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences