← Database

CVE-2023-1699

MEDIUM CVSS: 4.3 Published: 2023-03-30 Modified: 2026-06-17

Description

Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.  

Affected Platforms

Rapid7 Nexpose

Weakness Type

CWE-425, CWE-425

References