CVE:CVE-2020-7355
CNNVD:CNNVD-202006-1723
Rapid7 Metasploit Pro是美国Rapid7公司的一套渗透测试软件。
Rapid7 Metasploit Pro中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade rapid7 metasploit to a higher version than 4.17.1,4.17.1,4.17.1:20170221,4.17.1:20170323,4.17.1:20170405,4.17.1:20170419,4.17.1:20170510,4.17.1:20170518,4.17.1:20170530,4.17.1:20170613,4.17.1:20170627,4.17.1:20170718,4.17.1:20170731,4.17.1:20170816,4.17.1:20170828,4.17.1:20170914,4.17.1:20170926,4.17.1:20171009,4.17.1:20171030,4.17.1:20171115,4.17.1:20171129,4.17.1:20171206,4.17.1:20171220,4.17.1:20180108,4.17.1:20180124,4.17.1:20180206,4.17.1:20180301,4.17.1:20180312,4.17.1:20180327,4.17.1:20180410,4.17.1:20180501,4.17.1:20180511,4.17.1:20180526,4.17.1:20180618,4.17.1:20180704,4.17.1:20180716,4.17.1:20180727,4.17.1:20180813,4.17.1:20180827,4.17.1:20180907,4.17.1:20180924,4.17.1:20181009,4.17.1:20181022,4.17.1:20181105,4.17.1:20181130,4.17.1:20181215,4.17.1:20190108,4.17.1:20190118,4.17.1:20190201,4.17.1:20190219,4.17.1:20190303,4.17.1:20190319,4.17.1:20190331,4.17.1:20190416,4.17.1:20190426,4.17.1:20190513,4.17.1:20190603,4.17.1:20190607,4.17.1:20190626,4.17.1:20190722,4.17.1:20190805,4.17.1:20190819,4.17.1:20190910,4.17.1:20190930,4.17.1:20191014,4.17.1:20191030,4.17.1:20191108,4.17.1:20191209,4.17.1:20200113,4.17.1:20200122,4.17.1:20200131,4.17.1:20200218,4.17.1:20200302,4.17.1:20200318,4.17.1:20200330,4.17.1:20200413,and avoid the version (,4.17.1),4.17.1,4.17.1:20170221,4.17.1:20170323,4.17.1:20170405,4.17.1:20170419,4.17.1:20170510,4.17.1:20170518,4.17.1:20170530,4.17.1:20170613,4.17.1:20170627,4.17.1:20170718,4.17.1:20170731,4.17.1:20170816,4.17.1:20170828,4.17.1:20170914,4.17.1:20170926,4.17.1:20171009,4.17.1:20171030,4.17.1:20171115,4.17.1:20171129,4.17.1:20171206,4.17.1:20171220,4.17.1:20180108,4.17.1:20180124,4.17.1:20180206,4.17.1:20180301,4.17.1:20180312,4.17.1:20180327,4.17.1:20180410,4.17.1:20180501,4.17.1:20180511,4.17.1:20180526,4.17.1:20180618,4.17.1:20180704,4.17.1:20180716,4.17.1:20180727,4.17.1:20180813,4.17.1:20180827,4.17.1:20180907,4.17.1:20180924,4.17.1:20181009,4.17.1:20181022,4.17.1:20181105,4.17.1:20181130,4.17.1:20181215,4.17.1:20190108,4.17.1:20190118,4.17.1:20190201,4.17.1:20190219,4.17.1:20190303,4.17.1:20190319,4.17.1:20190331,4.17.1:20190416,4.17.1:20190426,4.17.1:20190513,4.17.1:20190603,4.17.1:20190607,4.17.1:20190626,4.17.1:20190722,4.17.1:20190805,4.17.1:20190819,4.17.1:20190910,4.17.1:20190930,4.17.1:20191014,4.17.1:20191030,4.17.1:20191108,4.17.1:20191209,4.17.1:20200113,4.17.1:20200122,4.17.1:20200131,4.17.1:20200218,4.17.1:20200302,4.17.1:20200318,4.17.1:20200330,4.17.1:20200413