MobSF Pen-Testing Tool Input Validation Flaw Leads to SSRF

The Mobile Security Framework (MobSF), a widely used pen-testing, malware analysis, and security assessment framework, has been found to contain a critical input validation flaw that could lead to server-side request forgery (SSRF) attacks. The vulnerability, tracked as CVE-2024-29190, affects MobSF version 3.9.5 Beta and prior. Understanding the Vulnerability: CVE-2024-29190 While investigating the “App Link […]

The post MobSF Pen-Testing Tool Input Validation Flaw Leads to SSRF appeared first on Cyber Security News.

analysis assessment attacks beta critical cve cyber security flaw forgery found framework input input validation malware malware analysis mobile mobile security pen request security security assessment security framework server server-side request forgery ssrf testing testing tool tool understanding validation version vulnerability