Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/10/18 7:0 p.m.24 views

MobSF allows attackers to read arbitrary files via a crafted HTTP request

Mobile Security Framework MobSF v0.9.2 and below was discovered to contain a local file inclusion LFI vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request...

7.5CVSS7.1AI score0.02366EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2022/10/18 3:15 p.m.10 views

CVE-2022-41547

Mobile Security Framework MobSF v0.9.2 and below was discovered to contain a local file inclusion LFI vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request...

7.5CVSS0.02366EPSS
Exploits1References2
OSV
OSV
added 2022/10/18 3:15 p.m.11 views

CVE-2022-41547

Mobile Security Framework MobSF v0.9.2 and below was discovered to contain a local file inclusion LFI vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request...

7.5CVSS7.4AI score
Exploits0References2
Cvelist
Cvelist
added 2022/10/18 12:0 a.m.12 views

CVE-2022-41547

Mobile Security Framework MobSF v0.9.2 and below was discovered to contain a local file inclusion LFI vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request...

7.5AI score0.02366EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.4 views

CVE-2022-41547

Mobile Security Framework MobSF v0.9.2 and below was discovered to contain a local file inclusion LFI vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request...

7.2AI score0.02366EPSS
Exploits1References2
CVE
CVE
added 2022/10/18 12:0 a.m.51 views

CVE-2022-41547

MobSF (Mobile Security Framework) is affected up to version 0.9.2, with a local file inclusion (LFI) vulnerability in StaticAnalyzer/views.py that allows reading arbitrary files via a crafted HTTP request. The CVE notes a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, no authentic...

7.5CVSS7.3AI score0.02366EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder