CVE-2017-5231

CVE-2017-5231 is a directory traversal vulnerability affecting Rapid7 Metasploit versions prior to 4.13.0-2017020701. Specifically, the Meterpreter stdapi CommandDispatcher.cmd_download() function allows an attacker to write to arbitrary directories on the Metasploit console. This vulnerability has a CVSS v3 score of 7.1 (High), indicating a high impact on confidentiality and integrity, and a low impact on availability, with a network attack vector and high attack complexity requiring user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.