CVE-2024-41955

Published at:
2024-07-31T20:15:06.793

Global infos:

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5.

CVE Status: Analyzed

References:

  • [email protected]
  • [email protected]
  • Metrics:

    AttributeValue
    Attack ComplexityLOW
    Attack VectorNETWORK
    Availability ImpactNONE
    Base Score5.2
    Base SeverityMEDIUM
    Confidentiality ImpactLOW
    Integrity ImpactHIGH
    Privileges RequiredHIGH
    ScopeUNCHANGED
    User InteractionREQUIRED
    Vector StringCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N
    Exploitability Score0.9
    Impact Score4.2
    Source[email protected]
    TypeSecondary

    Links:

    Exploit-db
    Github