CVE-2017-5233

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

• CWE-426

• http://www.securityfocus.com/bid/96957Third Party Advisory, VDB Entry
• https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-productsMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/96957Third Party Advisory, VDB Entry
• https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-productsMitigation, Vendor Advisory

Published

Mar 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5227QNAP QTS before 4.2.4 Build 20170313 allows local users to o…
• CVE-2017-5228All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5229All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5230The Java keystore in all versions and editions of Rapid7 Nex…
• CVE-2017-5231All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5232All editions of Rapid7 Nexpose installers prior to version 6…
• CVE-2017-5234Rapid7 Insight Collector installers prior to version 1.0.16 …
• CVE-2017-5235Rapid7 Metasploit Pro installers prior to version 4.13.0-201…
• CVE-2017-5236Editions of Rapid7 AppSpider Pro installers prior to version…
• CVE-2017-5237Due to a lack of authentication, an unauthenticated user who…
• CVE-2017-5238Due to a lack of bounds checking, several input configuratio…
• CVE-2017-5239Due to a lack of standard encryption when transmitting sensi…