Rapid7 · Rapid7 Metasploit · CVE-2019-5645
**Name of the Vulnerable Software and Affected Versions**
Rapid7 Metasploit (affected versions not specified)
**Description**
The issue allows an attacker to register an arbitrary regular expression by sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler. This can either prevent new HTTP handler sessions from being established or cause a resource exhaustion on the Metasploit server.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.