CyberRota Analysis
AI-GeneratedThe vulnerability affects MobSF versions prior to 4.5.1, specifically in the way it validates the Android manifest's host value, allowing an authenticated user to upload a malicious APK that can make requests to an attacker-controlled nonstandard port. This could potentially expose internal services to unauthorized access through DNS rebinding attacks, despite the fixed request path. Organizations using MobSF for mobile application security testing should prioritize upgrading to version 4.5.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/manifest_analysis.py validates only an Android manifest android:host value with valid_host before appending a separately supplied android:port to the URL fetched by _check_url, allowing an authenticated user to upload a crafted APK that makes requests to an attacker-selected nonstandard port at /.well-known/assetlinks.json. With an attacker-controlled hostname and DNS rebinding between validation and the requests.get connection, the request can reach an internal service, although redirects remain disabled and the path is fixed. This issue is fixed in version 4.5.1.