Read the docs
TI-2020-05948 Aliases CVE-2020-7355GHSA-54gc-87p2-87qm

Rapid7 Metasploit Pro Stored XSS in 'notes' field

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target store an XSS sequence in the Metasploit Pro console, which will trigger when the operator views the record of that scanned host in the Metasploit Pro interface. This issue affects Rapid7 Metasploit Pro version 4.17.1-20200427 and prior versions, and is fixed in Metasploit Pro version 4.17.1-20200514. See also CVE-2020-7354, which describes a similar issue, but involving the generated 'host' field of a discovered scan asset.

Why it matters now

EPSS 0.00881 59th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Rapid7Metasploit Pro4.17.1-20200427 – 4.17.1-20200427—No fix listedCNA
  • Metasploit Pro VendorRapid7 Affected 4.17.1-20200427 – 4.17.1-20200427 Fixed in — No fix listed CNA

CPE configurations NVD · 76

CPEVersionsRoleVendor
cpe:2.3:a:rapid7:metasploit:*:*:*:*:pro:*:*:*before 4.17.1VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:-:*:*:pro:*:*:*4.17.1VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170221:*:*:pro:*:*:*4.17.1 20170221VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170323:*:*:pro:*:*:*4.17.1 20170323VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170405:*:*:pro:*:*:*4.17.1 20170405VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170419:*:*:pro:*:*:*4.17.1 20170419VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170510:*:*:pro:*:*:*4.17.1 20170510VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170518:*:*:pro:*:*:*4.17.1 20170518VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170530:*:*:pro:*:*:*4.17.1 20170530VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170613:*:*:pro:*:*:*4.17.1 20170613VulnerableRapid7
  • cpe:2.3:a:rapid7:metasploit:*:*:*:*:pro:*:*:* Versions before 4.17.1 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:-:*:*:pro:*:*:* Versions 4.17.1 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170221:*:*:pro:*:*:* Versions 4.17.1 20170221 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170323:*:*:pro:*:*:* Versions 4.17.1 20170323 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170405:*:*:pro:*:*:* Versions 4.17.1 20170405 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170419:*:*:pro:*:*:* Versions 4.17.1 20170419 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170510:*:*:pro:*:*:* Versions 4.17.1 20170510 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170518:*:*:pro:*:*:* Versions 4.17.1 20170518 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170530:*:*:pro:*:*:* Versions 4.17.1 20170530 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170613:*:*:pro:*:*:* Versions 4.17.1 20170613 Vulnerable ·Rapid7
Show 66 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rapid7:metasploit:4.17.1:20170627:*:*:pro:*:*:*4.17.1 20170627VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170718:*:*:pro:*:*:*4.17.1 20170718VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170731:*:*:pro:*:*:*4.17.1 20170731VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170816:*:*:pro:*:*:*4.17.1 20170816VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170828:*:*:pro:*:*:*4.17.1 20170828VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170914:*:*:pro:*:*:*4.17.1 20170914VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20170926:*:*:pro:*:*:*4.17.1 20170926VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171009:*:*:pro:*:*:*4.17.1 20171009VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171030:*:*:pro:*:*:*4.17.1 20171030VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171115:*:*:pro:*:*:*4.17.1 20171115VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171129:*:*:pro:*:*:*4.17.1 20171129VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171206:*:*:pro:*:*:*4.17.1 20171206VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20171220:*:*:pro:*:*:*4.17.1 20171220VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180108:*:*:pro:*:*:*4.17.1 20180108VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180124:*:*:pro:*:*:*4.17.1 20180124VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180206:*:*:pro:*:*:*4.17.1 20180206VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180301:*:*:pro:*:*:*4.17.1 20180301VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180312:*:*:pro:*:*:*4.17.1 20180312VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180327:*:*:pro:*:*:*4.17.1 20180327VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180410:*:*:pro:*:*:*4.17.1 20180410VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180501:*:*:pro:*:*:*4.17.1 20180501VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180511:*:*:pro:*:*:*4.17.1 20180511VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180526:*:*:pro:*:*:*4.17.1 20180526VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180618:*:*:pro:*:*:*4.17.1 20180618VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180704:*:*:pro:*:*:*4.17.1 20180704VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180716:*:*:pro:*:*:*4.17.1 20180716VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180727:*:*:pro:*:*:*4.17.1 20180727VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180813:*:*:pro:*:*:*4.17.1 20180813VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180827:*:*:pro:*:*:*4.17.1 20180827VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180907:*:*:pro:*:*:*4.17.1 20180907VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20180924:*:*:pro:*:*:*4.17.1 20180924VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20181009:*:*:pro:*:*:*4.17.1 20181009VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20181022:*:*:pro:*:*:*4.17.1 20181022VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20181105:*:*:pro:*:*:*4.17.1 20181105VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20181130:*:*:pro:*:*:*4.17.1 20181130VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20181215:*:*:pro:*:*:*4.17.1 20181215VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190108:*:*:pro:*:*:*4.17.1 20190108VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190118:*:*:pro:*:*:*4.17.1 20190118VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190201:*:*:pro:*:*:*4.17.1 20190201VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190219:*:*:pro:*:*:*4.17.1 20190219VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190303:*:*:pro:*:*:*4.17.1 20190303VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190319:*:*:pro:*:*:*4.17.1 20190319VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190331:*:*:pro:*:*:*4.17.1 20190331VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190416:*:*:pro:*:*:*4.17.1 20190416VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190426:*:*:pro:*:*:*4.17.1 20190426VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190513:*:*:pro:*:*:*4.17.1 20190513VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190603:*:*:pro:*:*:*4.17.1 20190603VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190607:*:*:pro:*:*:*4.17.1 20190607VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190626:*:*:pro:*:*:*4.17.1 20190626VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190722:*:*:pro:*:*:*4.17.1 20190722VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190805:*:*:pro:*:*:*4.17.1 20190805VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190819:*:*:pro:*:*:*4.17.1 20190819VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190910:*:*:pro:*:*:*4.17.1 20190910VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20190930:*:*:pro:*:*:*4.17.1 20190930VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20191014:*:*:pro:*:*:*4.17.1 20191014VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20191030:*:*:pro:*:*:*4.17.1 20191030VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20191108:*:*:pro:*:*:*4.17.1 20191108VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20191209:*:*:pro:*:*:*4.17.1 20191209VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200113:*:*:pro:*:*:*4.17.1 20200113VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200122:*:*:pro:*:*:*4.17.1 20200122VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200131:*:*:pro:*:*:*4.17.1 20200131VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200218:*:*:pro:*:*:*4.17.1 20200218VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200302:*:*:pro:*:*:*4.17.1 20200302VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200318:*:*:pro:*:*:*4.17.1 20200318VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200330:*:*:pro:*:*:*4.17.1 20200330VulnerableRapid7
cpe:2.3:a:rapid7:metasploit:4.17.1:20200413:*:*:pro:*:*:*4.17.1 20200413VulnerableRapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170627:*:*:pro:*:*:* Versions 4.17.1 20170627 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170718:*:*:pro:*:*:* Versions 4.17.1 20170718 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170731:*:*:pro:*:*:* Versions 4.17.1 20170731 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170816:*:*:pro:*:*:* Versions 4.17.1 20170816 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170828:*:*:pro:*:*:* Versions 4.17.1 20170828 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170914:*:*:pro:*:*:* Versions 4.17.1 20170914 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20170926:*:*:pro:*:*:* Versions 4.17.1 20170926 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171009:*:*:pro:*:*:* Versions 4.17.1 20171009 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171030:*:*:pro:*:*:* Versions 4.17.1 20171030 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171115:*:*:pro:*:*:* Versions 4.17.1 20171115 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171129:*:*:pro:*:*:* Versions 4.17.1 20171129 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171206:*:*:pro:*:*:* Versions 4.17.1 20171206 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20171220:*:*:pro:*:*:* Versions 4.17.1 20171220 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180108:*:*:pro:*:*:* Versions 4.17.1 20180108 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180124:*:*:pro:*:*:* Versions 4.17.1 20180124 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180206:*:*:pro:*:*:* Versions 4.17.1 20180206 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180301:*:*:pro:*:*:* Versions 4.17.1 20180301 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180312:*:*:pro:*:*:* Versions 4.17.1 20180312 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180327:*:*:pro:*:*:* Versions 4.17.1 20180327 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180410:*:*:pro:*:*:* Versions 4.17.1 20180410 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180501:*:*:pro:*:*:* Versions 4.17.1 20180501 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180511:*:*:pro:*:*:* Versions 4.17.1 20180511 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180526:*:*:pro:*:*:* Versions 4.17.1 20180526 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180618:*:*:pro:*:*:* Versions 4.17.1 20180618 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180704:*:*:pro:*:*:* Versions 4.17.1 20180704 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180716:*:*:pro:*:*:* Versions 4.17.1 20180716 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180727:*:*:pro:*:*:* Versions 4.17.1 20180727 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180813:*:*:pro:*:*:* Versions 4.17.1 20180813 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180827:*:*:pro:*:*:* Versions 4.17.1 20180827 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180907:*:*:pro:*:*:* Versions 4.17.1 20180907 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20180924:*:*:pro:*:*:* Versions 4.17.1 20180924 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20181009:*:*:pro:*:*:* Versions 4.17.1 20181009 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20181022:*:*:pro:*:*:* Versions 4.17.1 20181022 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20181105:*:*:pro:*:*:* Versions 4.17.1 20181105 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20181130:*:*:pro:*:*:* Versions 4.17.1 20181130 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20181215:*:*:pro:*:*:* Versions 4.17.1 20181215 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190108:*:*:pro:*:*:* Versions 4.17.1 20190108 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190118:*:*:pro:*:*:* Versions 4.17.1 20190118 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190201:*:*:pro:*:*:* Versions 4.17.1 20190201 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190219:*:*:pro:*:*:* Versions 4.17.1 20190219 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190303:*:*:pro:*:*:* Versions 4.17.1 20190303 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190319:*:*:pro:*:*:* Versions 4.17.1 20190319 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190331:*:*:pro:*:*:* Versions 4.17.1 20190331 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190416:*:*:pro:*:*:* Versions 4.17.1 20190416 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190426:*:*:pro:*:*:* Versions 4.17.1 20190426 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190513:*:*:pro:*:*:* Versions 4.17.1 20190513 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190603:*:*:pro:*:*:* Versions 4.17.1 20190603 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190607:*:*:pro:*:*:* Versions 4.17.1 20190607 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190626:*:*:pro:*:*:* Versions 4.17.1 20190626 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190722:*:*:pro:*:*:* Versions 4.17.1 20190722 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190805:*:*:pro:*:*:* Versions 4.17.1 20190805 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190819:*:*:pro:*:*:* Versions 4.17.1 20190819 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190910:*:*:pro:*:*:* Versions 4.17.1 20190910 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20190930:*:*:pro:*:*:* Versions 4.17.1 20190930 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20191014:*:*:pro:*:*:* Versions 4.17.1 20191014 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20191030:*:*:pro:*:*:* Versions 4.17.1 20191030 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20191108:*:*:pro:*:*:* Versions 4.17.1 20191108 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20191209:*:*:pro:*:*:* Versions 4.17.1 20191209 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200113:*:*:pro:*:*:* Versions 4.17.1 20200113 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200122:*:*:pro:*:*:* Versions 4.17.1 20200122 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200131:*:*:pro:*:*:* Versions 4.17.1 20200131 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200218:*:*:pro:*:*:* Versions 4.17.1 20200218 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200302:*:*:pro:*:*:* Versions 4.17.1 20200302 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200318:*:*:pro:*:*:* Versions 4.17.1 20200318 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200330:*:*:pro:*:*:* Versions 4.17.1 20200330 Vulnerable ·Rapid7
  • cpe:2.3:a:rapid7:metasploit:4.17.1:20200413:*:*:pro:*:*:* Versions 4.17.1 20200413 Vulnerable ·Rapid7

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7355
  2. 2026-10-03 Alias added: GHSA-54gc-87p2-87qm

References

Exploit 1

Advisory 1

  • TI-2019-04008 Rapid7 Metasploit HTTP Handler Denial of Service CVSS 3.1HIGH 7.5
  • TI-2020-05967 Client-Side Command Injection in Rapid7 Metasploit CVSS 3.1HIGH 7.8
  • TI-2020-05961 Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module CVSS 3.1CRITICAL 9.8
  • TI-2020-05968 Metasploit Framework 'drb_remote_codeexec' code execution CVSS 3.1HIGH 8.8
  • TI-2020-05944 Metasploit Framework Plugin Libnotify Command Injection CVSS 3.1HIGH 7.8
  • TI-2020-05962 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module CVSS 3.1HIGH 8.1
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences