CVE-2023-0681 Rapid7 Nexpose Uncontrolled URL Redirect
An attacker can redirect users to malicious sites via the page parameter in Rapid7 InsightVM, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-0681?
CVE-2023-0681 is a medium-severity vulnerability in Rapid7 Nexpose, published on 20 Mar 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179.
Weakness: CWE-601
Which versions are affected by CVE-2023-0681?
It affects 1 product.
Products include Rapid7 Insightvm.
How do I fix CVE-2023-0681?
No fix has been published for CVE-2023-0681 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-0681 being exploited?
There is no known exploitation of CVE-2023-0681 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 Nexpose
- CVE-2017-5242 Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key
- CVE-2021-3844 Rapid7 InsightVM Insufficient Session Expiration
- CVE-2022-4261 Rapid7 Nexpose Update Validation Issue
- CVE-2024-6504 Rapid7 InsightVM Protection Mechanism Failure
- CVE-2024-2745 Rapid7 InsightVM Sensitive Information Exposure via URL
Sources
Also known as GHSA-6wvc-j264-82hv.