{"action":"Upgrade metasploit-framework to 4.19.0 or later.","affected":[{"fixed":"4.19.0","introduced":"0"}],"component":"metasploit-framework","cve_ids":["CVE-2020-7385"],"ecosystem":"RubyGems","epss":0.0175,"exploited":false,"fixed_versions":["4.19.0"],"ghsa_id":"GHSA-xgww-h98f-24qf","id":"tcs_01M5KEP8R4153FG90KVM8P2RG2","modified_at":"2023-11-08T04:03:59.391180Z","published_at":"2022-05-24T17:48:42Z","references":["https://osv.dev/vulnerability/GHSA-xgww-h98f-24qf","https://nvd.nist.gov/vuln/detail/CVE-2020-7385","https://github.com/rapid7/metasploit-framework/pull/14300","https://github.com/rapid7/metasploit-framework/pull/14335","https://github.com/rapid7/metasploit-framework","https://help.rapid7.com/metasploit/release-notes/archive/2020/10"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-xgww-h98f-24qf","url":"https://osv.dev/vulnerability/GHSA-xgww-h98f-24qf"}],"summary":"Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module"}