Описание
MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1.
Ссылки
- Patch
- Release Notes
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:opensecurity:mobile_security_framework:4.4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00139
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
5 месяцев назад
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
EPSS
Процентиль: 34%
0.00139
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22