Rapid7 Metasploit Framework Zip Import Directory Traversal
CVE-2019-5624

7.4HIGH

Key Information:

Vendor

Rapid7

Status
Metasploit Framework
Vendor
CVE Published:
30 April 2019

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-5624?

Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary code in Metasploit at the privilege level of the user running Metasploit. This issue affects: Rapid7 Metasploit Framework version 4.14.0 and prior versions.

Affected Version(s)

Metasploit Framework 4.14.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-5624
Created by VoidSec

References

https://github.com/rapid7/metasploit-framework/pull/11716
x_refsource_CONFIRM
https://help.rapid7.com/metasploit/release-notes/archive/...
x_refsource_CONFIRM
https://blog.doyensec.com/2019/04/24/rubyzip-bug.html
x_refsource_MISC

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

CVSS V3.0

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Doyensec, and reported privately by Luca Carettoni.
.