Server-Side Request Forgery Vulnerability in Mobile Security Framework by MobSF
CVE-2024-31215
Currently unrated
What is CVE-2024-31215?
The Mobile Security Framework (MobSF) has been identified with a Server-Side Request Forgery (SSRF) vulnerability in its firebase database check logic. This vulnerability can be exploited by an attacker to trigger internal communications within the organization’s infrastructure when a malicious application is uploaded to the Static analyzer. These internal requests can compromise sensitive internal services and lead to further exploitation if left unaddressed. This issue has been remediated in version 3.9.8 of MobSF.