GitHub_MVULNRICHMENT:CVE-2024-41955CVE-2024-41955 Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N
AI Score
Confidence
Low
EPSS
Percentile
32.5%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5.
CNA Affected
[
{
"vendor": "MobSF",
"product": "Mobile-Security-Framework-MobSF",
"versions": [
{
"status": "affected",
"version": "< 4.0.5"
}
]
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N
AI Score
Confidence
Low
EPSS
Percentile
32.5%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial