Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2019-5630

Rapid7 Nexpose/InsightVM Security Console CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. This issue allows attackers to exploit CSRF vulnerabilities on API endpoints using Flash to circumvent a cross-domain pre-flight OPTIONS request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rapid7 Nexpose/InsightVM Security Console

  • 6.5.0 through 6.5.68affected

References