Insecure Permissions Affecting mobsf package, versions [0,]
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.11% (47th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-MOBSF-5915326
- published 22 Sep 2023
- disclosed 21 Sep 2023
- credit woshinibaba222
Introduced: 21 Sep 2023
CVE-2023-42261 Open this link in a new tabHow to fix?
There is no fixed version for mobsf.
Overview
mobsf is a Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Affected versions of this package are vulnerable to Insecure Permissions due to missing access restrictions. An attacker can append /recent_scans/ to the URL after the homepage and gain access to APK or IPA reports, potentially leading to sensitive information disclosure.
References
CVSS Scores
version 3.1