CVE-2017-5244 Cross-site request forgery in Metasploit (Pro, Express, and Community editions)
An attacker can stop running Metasploit tasks by tricking an authenticated user into visiting a malicious page, causing service disruption.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-5244?
CVE-2017-5244 is a low-severity vulnerability in Rapid7 Metasploit (Pro, Express, and Community editions), published on 15 Jun 2017. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST requests should have been allowed, as the stop/stop_all routes change the state of the service. This could have allowed an attacker to stop currently-running Metasploit tasks by getting an authenticated user to execute JavaScript. As of Metasploit 4.14.0 (Update 2017061301), the routes for stopping tasks only allow POST requests, which validate the presence of a secret token to prevent CSRF attacks.
Weakness: CWE-352
Which versions are affected by CVE-2017-5244?
It affects 1 product.
Products include Rapid7 Metasploit.
How do I fix CVE-2017-5244?
No fix has been published for CVE-2017-5244 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5244 being exploited?
There is no known exploitation of CVE-2017-5244 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 Metasploit (Pro, Express, and Community editions)
- CVE-2020-7385 Metasploit Framework 'drb_remote_codeexec' code execution
- CVE-2020-7377 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
- CVE-2017-5235 Other in Metasploit Pro
- CVE-2019-5645 Rapid7 Metasploit HTTP Handler Denial of Service
- CVE-2019-5624 Rapid7 Metasploit Framework Zip Import Directory Traversal
Sources
Also known as GHSA-7vfm-4xqj-pv85.