Directory Traversal Vulnerability in Rapid7 Metasploit

CVE-2017-5228

What is CVE-2017-5228?

Rapid7 Metasploit, specifically versions before 4.13.0-2017020701, is susceptible to a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. This vulnerability can be exploited by leveraging a specially-crafted build of Meterpreter, enabling unauthorized write access to arbitrary directories within the Metasploit console. The exploitation occurs with the same permissions as the running Metasploit instance, posing risks to directory integrity and confidentiality.

References