Skip to content
OpenAdvisories

Product · Rapid7

Insight Platform

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.4

    Rapid7 Insight Platform Unauthorized Empty Group Creation

    Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty u…