Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-yqnd-87jt-cyfk

Summary Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get() request in the _check_url method is specified as allow_redirects=True, which allows a server-side request forgery when a request to .well-known/assetlinks.json" returns a 302 redirect. This is a bypass of the fix for CVE-2024-29190 and is fixed in 3.9.7.

Aliases

alias	CVE-2024-54000

alias	GHSA-m435-9v6r-v5f6

alias	PYSEC-2024-256

Fixed_packages

url pkg:pypi/mobsf@3.9.7

purl pkg:pypi/mobsf@3.9.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.9.7

Affected_packages

url pkg:pypi/mobsf@3.2.6

purl pkg:pypi/mobsf@3.2.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.2.6

url pkg:pypi/mobsf@3.2.7

purl pkg:pypi/mobsf@3.2.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.2.7

url pkg:pypi/mobsf@3.2.8

purl pkg:pypi/mobsf@3.2.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.2.8

url pkg:pypi/mobsf@3.2.9

purl pkg:pypi/mobsf@3.2.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.2.9

url pkg:pypi/mobsf@3.3.3

purl pkg:pypi/mobsf@3.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.3.3

url pkg:pypi/mobsf@3.3.5

purl pkg:pypi/mobsf@3.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.3.5

url pkg:pypi/mobsf@3.4.0

purl pkg:pypi/mobsf@3.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.4.0

url pkg:pypi/mobsf@3.4.3

purl pkg:pypi/mobsf@3.4.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.4.3

url pkg:pypi/mobsf@3.4.6

purl pkg:pypi/mobsf@3.4.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.4.6

url pkg:pypi/mobsf@3.5.0

purl pkg:pypi/mobsf@3.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.5.0

url pkg:pypi/mobsf@3.6.0

purl pkg:pypi/mobsf@3.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.6.0

url pkg:pypi/mobsf@3.6.9

purl pkg:pypi/mobsf@3.6.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.6.9

url pkg:pypi/mobsf@3.7.6

purl pkg:pypi/mobsf@3.7.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7uxm-9rw7-gkca

vulnerability	VCID-dh45-7mwj-vkhp

vulnerability	VCID-rgjm-y7h9-sbe8

vulnerability	VCID-yqnd-87jt-cyfk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mobsf@3.7.6

References

reference_url	https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/f22c584aa7d43527970c9da61eb678953cfc0a8e
reference_id
reference_type
scores
url	https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/f22c584aa7d43527970c9da61eb678953cfc0a8e

reference_url	https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6
reference_id
reference_type
scores
url	https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6

Weaknesses

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yqnd-87jt-cyfk

Vulnerability Instance