Description
A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid7 | Nexpose | unspecified – < 6.6.49 | 6.6.49 |