Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

相对路径遍历

Rapid7 Metasploit Framework 安全漏洞

Rapid7 Metasploit Framework是美国Rapid7公司的一款渗透测试框架。 Rapid7 Metasploit Framework存在安全漏洞，该漏洞源于代码开发过程中存在设计或实现不当的问题，攻击者可以利用该漏洞上传任意文件到宿主系统的任意位置。

N/A

N/A