Description
OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid7 | InsightConnect SQLmap Plugin | < 2.0.1 | 2.0.1 |
References
- https://extensions.rapid7.com/extension/sqlmap vendor-advisory