CyberRota Analysis
AI-GeneratedMobSF versions prior to 4.5.1 are vulnerable due to improper configuration of CSRF protection, allowing remote attackers to exploit authenticated sessions and perform unauthorized actions such as deleting scans, managing users, and changing passwords. The impact includes potential data loss and unauthorized access to sensitive functionalities. Organizations using MobSF for mobile application security testing should prioritize upgrading to version 4.5.1 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMiddleware only in the deprecated MIDDLEWARE_CLASSES setting and omits it from the active MIDDLEWARE tuple, allowing a remote attacker to make a logged-in victim submit cross-site POST requests to authenticated web endpoints including /delete_scan/, /upload/, /download_scan/, /change_password/, /create_user/, and /delete_user/. This can delete scans, upload or download applications, change passwords, or manage users with the victim account permissions. This issue is fixed in version 4.5.1.