CVE-2019-5624

CVE-2019-5624 is a path traversal vulnerability (CWE-22) in the Zip import function of Rapid7 Metasploit Framework versions 4.14.0 and prior. An attacker can exploit this to execute arbitrary code within Metasploit at the user's privilege level. With a CVSS score of 7.3 (High), it requires local access and user interaction (UI:R) but has low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion.