Cloudanix VulnDB

CVE-2019-5645

High · 7.5

CVSS

7.5

EPSS

41.7%

Published

Sep 1, 2020

CISA due date

—

The record

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities