https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:35:58 +0000 https://cve.radiocsirt.org/vuln/cve-2024-54000 <p><strong>Affected:</strong> MobSF Mobile-Security-Framework-MobSF, mobsf mobile_security_framework</p> <p>Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get() request in the _check_url method is specified as allow_redirects=True, which allows a server-side request forgery when a request to .well-known/assetlinks.json&#34; returns a 302 redirect. This is a bypass of the fix for CVE-2024-29190 and is fixed in 3.9.7.</p> <p><strong>Affected:</strong> MobSF Mobile-Security-Framework-MobSF, mobsf mobile_security_framework</p> <p>Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get() request in the _check_url method is specified as allow_redirects=True, which allows a server-side request forgery when a request to .well-known/assetlinks.json&#34; returns a 302 redirect. This is a bypass of the fix for CVE-2024-29190 and is fixed in 3.9.7.</p> https://cve.radiocsirt.org/vuln/cve-2024-54000