CVE-2020-7377

CVE-2020-7377 describes a relative path traversal vulnerability within the Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump." This flaw allows an attacker to write arbitrary files to arbitrary locations on the host filesystem if the module is executed against a malicious HTTP server. With a CVSS score of 7.5 (High), the vulnerability has a network attack vector and low attack complexity, potentially leading to high integrity impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.