CVE-2023-0681
20.03.2023, 20:15
Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| rapid7 | insightvm | 𝑥 < 6.6.179 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| rapid7 | nexpose | 𝑥 ≤ 6.6.178 | CNA |
Common Weakness Enumeration