What’s Vulnerable › Vulnerabilities

CVE-2017-15084

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-06 · updated 2026-06-17
• Weakness: CWE-352

Description

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.

Affected products

• Rapid7 Metasploit Framework: through 4.14.1

References

• https://blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/
• https://blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/

Get alerted when CVE-2017-15084 or the next vulnerability affects your stack