p PatchFirst

CVE-2024-41955

CVE-2024-41955 · Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5.

CVSS 5.2 · Medium · EPSS 1.0% · Public exploit · Fix available

Published
Updated

Stack: python

Affected products and versions

  • mobile-security-framework-mobsf

    Versions
    • < 4.0.5: Affected

    No fix published

  • mobsf PyPI

    Versions
    • 3.2.6
    • 3.2.7
    • 3.2.8
    • 3.2.9
    • 3.3.3
    • 3.3.5
    • 3.4.0
    • 3.4.3
    • 3.4.6
    • 3.5.0
    • 3.6.0
    • 3.6.9
    • 3.7.6
    • 3.9.7
    Affected ranges
    • ECOSYSTEM: < 4.0.5

    Update to 4.0.5

Original sources

Check your server →