CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5645

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.879

EPSS Ranking 99.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2019-5645

Rapid7 » Metasploit » Version: 4.11.7

cpe:2.3:a:rapid7:metasploit:4.11.7
Rapid7 » Metasploit » Version: 4.12.40

cpe:2.3:a:rapid7:metasploit:4.12.40
Rapid7 » Metasploit » Version: 4.13.0

cpe:2.3:a:rapid7:metasploit:4.13.0
Rapid7 » Metasploit » Version: 4.13.1

cpe:2.3:a:rapid7:metasploit:4.13.1
Rapid7 » Metasploit » Version: 4.13.19

cpe:2.3:a:rapid7:metasploit:4.13.19
Rapid7 » Metasploit » Version: 4.14.0

cpe:2.3:a:rapid7:metasploit:4.14.0
Rapid7 » Metasploit » Version: 4.14.1

cpe:2.3:a:rapid7:metasploit:4.14.1
Rapid7 » Metasploit » Version: 4.14.2

cpe:2.3:a:rapid7:metasploit:4.14.2
Rapid7 » Metasploit » Version: 4.14.3

cpe:2.3:a:rapid7:metasploit:4.14.3
Rapid7 » Metasploit » Version: 4.15.0

cpe:2.3:a:rapid7:metasploit:4.15.0
Rapid7 » Metasploit » Version: 4.15.1

cpe:2.3:a:rapid7:metasploit:4.15.1
Rapid7 » Metasploit » Version: 4.16.0

cpe:2.3:a:rapid7:metasploit:4.16.0
Rapid7 » Metasploit » Version: 4.17.1

cpe:2.3:a:rapid7:metasploit:4.17.1
Rapid7 » Metasploit » Version: 4.19.0

cpe:2.3:a:rapid7:metasploit:4.19.0
Rapid7 » Metasploit » Version: 5.0.0

cpe:2.3:a:rapid7:metasploit:5.0.0
Rapid7 » Metasploit » Version: 5.0.1

cpe:2.3:a:rapid7:metasploit:5.0.1
Rapid7 » Metasploit » Version: 5.0.10

cpe:2.3:a:rapid7:metasploit:5.0.10
Rapid7 » Metasploit » Version: 5.0.11

cpe:2.3:a:rapid7:metasploit:5.0.11
Rapid7 » Metasploit » Version: 5.0.12

cpe:2.3:a:rapid7:metasploit:5.0.12
Rapid7 » Metasploit » Version: 5.0.13

cpe:2.3:a:rapid7:metasploit:5.0.13
Rapid7 » Metasploit » Version: 5.0.14

cpe:2.3:a:rapid7:metasploit:5.0.14
Rapid7 » Metasploit » Version: 5.0.15

cpe:2.3:a:rapid7:metasploit:5.0.15
Rapid7 » Metasploit » Version: 5.0.16

cpe:2.3:a:rapid7:metasploit:5.0.16
Rapid7 » Metasploit » Version: 5.0.17

cpe:2.3:a:rapid7:metasploit:5.0.17
Rapid7 » Metasploit » Version: 5.0.18

cpe:2.3:a:rapid7:metasploit:5.0.18
Rapid7 » Metasploit » Version: 5.0.19

cpe:2.3:a:rapid7:metasploit:5.0.19
Rapid7 » Metasploit » Version: 5.0.2

cpe:2.3:a:rapid7:metasploit:5.0.2
Rapid7 » Metasploit » Version: 5.0.20

cpe:2.3:a:rapid7:metasploit:5.0.20
Rapid7 » Metasploit » Version: 5.0.21

cpe:2.3:a:rapid7:metasploit:5.0.21
Rapid7 » Metasploit » Version: 5.0.22

cpe:2.3:a:rapid7:metasploit:5.0.22
Rapid7 » Metasploit » Version: 5.0.23

cpe:2.3:a:rapid7:metasploit:5.0.23
Rapid7 » Metasploit » Version: 5.0.24

cpe:2.3:a:rapid7:metasploit:5.0.24
Rapid7 » Metasploit » Version: 5.0.25

cpe:2.3:a:rapid7:metasploit:5.0.25
Rapid7 » Metasploit » Version: 5.0.26

cpe:2.3:a:rapid7:metasploit:5.0.26
Rapid7 » Metasploit » Version: 5.0.27

cpe:2.3:a:rapid7:metasploit:5.0.27
Rapid7 » Metasploit » Version: 5.0.3

cpe:2.3:a:rapid7:metasploit:5.0.3
Rapid7 » Metasploit » Version: 5.0.4

cpe:2.3:a:rapid7:metasploit:5.0.4
Rapid7 » Metasploit » Version: 5.0.5

cpe:2.3:a:rapid7:metasploit:5.0.5
Rapid7 » Metasploit » Version: 5.0.6

cpe:2.3:a:rapid7:metasploit:5.0.6
Rapid7 » Metasploit » Version: 5.0.7

cpe:2.3:a:rapid7:metasploit:5.0.7
Rapid7 » Metasploit » Version: 5.0.8

cpe:2.3:a:rapid7:metasploit:5.0.8
Rapid7 » Metasploit » Version: 5.0.9

cpe:2.3:a:rapid7:metasploit:5.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5645

Products

Pricing

Contact Us