Skip to content
OpenAdvisories
High · 7.1 CVE-2020-7376 EUVD-2020-28503GHSA-pvg7-xxgr-rgpc

Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module

Published Aug 24, 2020 · Updated Sep 16, 2024 · Assigned by rapid7

Description

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

Affected products

VendorProductAffectedFixed
Rapid7 Metasploit Framework 4.11.7 – < 4.11.7*, 6.0.3 – < 6.0.3 4.11.7*

References