CVE-2023-42261

Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions

published September 21, 2023

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example, use a reverse proxy server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00859 · 58.1th percentile
Published
2023-09-21T00:00Z
EPSS history
Timeline
  • 21 SEP 00:00Z
    Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions
    cvelistv5