RubyGems/metasploit-framework CVE-2020-7385: high 8.1, EPSS 1.75%
Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module
Action: Upgrade metasploit-framework to 4.19.0 or later.
bundle update metasploit-frameworkAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.19.0 | - |
Fixed versions
| 4.19.0 |
Sources
- osv: GHSA-xgww-h98f-24qf
- https://nvd.nist.gov/vuln/detail/CVE-2020-7385
- https://github.com/rapid7/metasploit-framework/pull/14300
- https://github.com/rapid7/metasploit-framework/pull/14335
- https://github.com/rapid7/metasploit-framework
- https://help.rapid7.com/metasploit/release-notes/archive/2020/10
CVE-2020-7385 · published · modified · JSON