VULNERABILITY INTELLIGENCE

CVE-2023-0681

CVSS score4.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2023-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179.

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references