2017-10-06 21:00:00
mitre
PUBLISHED
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.