mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00

Files

T

Ajin Abraham 4b8bab5a98 [SECURITY] Improve SSRF checks, strict path check for well_known_path (#2510 )

* Improved SSRF checks (credential checks, length check, port check, path, query, and params check, ipv6, ipv4 coverage, handle possible decimal or hex IP bypasses)
* Add additional strict path check for Applink well known path
* Moved `valid_host` to `security.py`
* Update `security.md`
* Bump dependencies
* Fix docker build

2025-03-28 17:38:23 -07:00

2.9 KiB

Raw Blame History

Security Policy

Keeping MobSF updated to the latest version is essential for ensuring security and stability.

Reporting a Vulnerability

Please report all security issues here or email ajin25(gmail). We believe in coordinated and responsible disclosure.

Past Security Issues

Vulnerability	Affected Versions
SSRF on assetlinks_check with DNS Rebinding	`<=4.3.1`
Partial Denial of Service due to strict regex check in iOS report view URL	`<=4.3.0`
Local Privilege escalation due to leaked REST API key in web UI	`<=4.3.0`
Stored Cross-Site Scripting in iOS dynamic_analysis view via `bundle` id	`<=4.3.0`
Stored Cross-Site Scripting Vulnerability in Recent Scans "Diff or Compare"	`<=4.2.8`
Zip Slip Vulnerability in .a extraction	`<=4.0.6`
Open Redirect in Login redirect	`<=4.0.4`
SSRF in firebase database check	`<=3.9.7`
SSRF in AppLink check via abusing url redirect	`<=3.9.6`
SSRF in AppLink check via crafted android:host	`<=3.9.5`
Arbitrary Local file read in APK icon resource	`>=1.0.4, <=3.9.2`
Remote Code Execution via arbitrary file overwrite vulnerability in apktool <2.9.2, [CVE-2024-21633]	`<=3.9.1`
Arbitrary Local file read regression	`<3.0.0`
Upload a malicious zip file can overwrite arbitary files	`>=0.9.3.2, <=0.9.4.1`
Arbitrary Local file read	`<=0.9.2`

2.9 KiB Raw Blame History

Security Policy

Reporting a Vulnerability

Past Security Issues

2.9 KiB

Raw Blame History