CVE-2020-7383: SQL Injection in Rapid7 Nexpose
First published: Wed Oct 14 2020(Updated: )
A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.
Credit: cve@rapid7.con
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rapid7 Nexpose | <6.6.49 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2020-7383.
What is the title of this vulnerability?
The title of this vulnerability is 'A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.'
What is the severity of CVE-2020-7383?
The severity of CVE-2020-7383 is high with a severity value of 8.1.
What software versions are affected by CVE-2020-7383?
Rapid7 Nexpose versions prior to 6.6.49 are affected by CVE-2020-7383.
How can I fix the SQL Injection issue in Rapid7 Nexpose?
To fix the SQL Injection issue in Rapid7 Nexpose, you should update to version 6.6.49 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/author
- agent/weakness
- agent/references
- agent/event
- agent/tags
- agent/description
- agent/first-publish-date
- vendor/rapid7
- canonical/rapid7 nexpose