CVE-2017-5229

CVE-2017-5229 is a directory traversal vulnerability affecting Rapid7 Metasploit versions prior to 4.13.0-2017020701, specifically within the Meterpreter extapi Clipboard.parse_dump() function. This flaw allows an attacker, via a specially crafted Meterpreter build, to write to arbitrary directories on the Metasploit console with the permissions of the running instance. Rated with a CVSS score of 7.1 (HIGH), it has a network attack vector, high attack complexity, and can lead to high impact on confidentiality and integrity, with low availability impact. There is currently no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it has received minimal community discussion or media coverage.