CVE-2023-0681

6.1 mediumEPSS 0.3%

Medium (6.1) in rapid7 insightvm. EPSS 0.3% chance of exploitation in the next 30 days.

Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2023-03-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rapid7:insightvm

References

https://docs.rapid7.com/release-notes/nexpose/20230208/
https://docs.rapid7.com/release-notes/nexpose/20230208/

Check your stack JSON