Opensecurity vulnerabilities
We track 3 vulnerabilities in Opensecurity products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
Latest Opensecurity vulnerabilities
- 9.8 Critical severity
Mobile-Security-Framework-MobSF: Server-Side Request Forgery
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The mitigation for CVE-2024-29190 in valid_host() uses socket.gethostbyname(), which is vulnerable to SSRF
- 7.5 High severity
mobile_security_framework: Incorrect Default Permissions
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requi
- 7.5 High severity
Mobile Security Framework: Improper Control of Filename for Include/Require Statement in PHP Program
Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request.