MobSF allows attackers to read arbitrary files via a crafted HTTP request

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-41547 · ADVISORY
• MobSF/Mobile-Security-Framework-MobSF#166 · WEB
• MobSF/Mobile-Security-Framework-MobSF commit b9cdd1f · WEB
• MobSF/Mobile-Security-Framework-MobSF · PACKAGE
• pypi.org/project/mobsf · PACKAGE
• GitHub Advisory GHSA-f42p-vc8p-7x54 · ADVISORY

mobsf のその他の脆弱性

• CVE-2026-68927低 3.0MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/man…
• CVE-2026-68924中 4.9MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_fun…
• CVE-2026-68923中 6.5MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMidd…
• CVE-2026-68922中 5.5MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_anal…
• CVE-2026-33545中 6.5MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's `read_sqlite()` function in `mobsf/MobSF/utils.py`…