mobile_security_framework vulnerabilities
3 known vulnerabilities in mobile_security_framework from MobSF. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Mobile-Security-Framework-MobSF: Server-Side Request Forgery
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get() request in the _check_url method is specified as allow_redi
- 9.8 Critical severity
Mobile-Security-Framework-MobSF: Improper Limitation of a Pathname to a Restricted Directory
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extractio
- 7.5 High severity
Mobile-Security-Framework-MobSF: Server-Side Request Forgery
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In version 3.9.5 Beta and prior, MobSF does not perform any input validation when extracting the hostnames