Description
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid7 | Nexpose | All versions prior to version 6.4.24 | — |