← All advisories

Medium severity6.5NVD Advisory· Published Oct 6, 2017· Updated Jun 17, 2026

CVE-2017-15084

CVE-2017-15084

Description

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Rapid7/Metasploit2 versions
cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*range: <=4.14.1
- (no CPE)range: <4.14.1-20170828

Patches

Vulnerability mechanics

References

1

blog.rapid7.com/2017/10/06/vulnerabilities-affecting-four-rapid7-products-fixed/nvdIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.