Description
Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid7 | InsightConnect Sed Plugin | < 2.0.5 | 2.0.5 |
References
- https://extensions.rapid7.com/extension/sed vendor-advisory