CVE-2020-7377 — Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be ex…
Published: 2020-08-24 · CVSS: 8.1 · CVSS 3.1
The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7