Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2020-7384

Client-Side Command Injection in Rapid7 Metasploit

Description

Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rapid7 Metasploit

  • unspecified to < 4.19.0affected

References