CVE-2023-1699 — Rapid7 Nexpose Forced Browsing
Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability. This vulnerability allows an attacker to manipulate URLs to forcefully browse to and acce…
Published: 2023-03-30 · CVSS: 4.3 · CVSS 3.1
Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability. This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7