CVE-2019-5647

ALTO 7.1CVE-2019-5647 · Published 22/01/2020 · updated 17/06/2026

In breve

CVE-2019-5647 è una vulnerabilità ALTO (CVSS 7.1) che riguarda appspider (rapid7).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.34%, superiore al 27.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
appspider rapid7	`≤ 3.8.213`	No fix yet

Description

The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not. This issue affects Rapid7 AppSpider version 3.8.213 and prior versions, and is fixed in version 3.8.215.

References

help.rapid7.com/appspiderenterprise/release-notes · Release Notes

Altre vulnerabilità di appspider

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free