What’s Vulnerable › Vulnerabilities

CVE-2024-41955: Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-31 · updated 2026-06-17
• Weakness: CWE-601

Description

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5.

Affected products

• MobSF Mobile-Security-Framework-MobSF: before 4.0.5 — fixed in 4.0.5

How to fix

Upgrade to a fixed version: MobSF Mobile-Security-Framework-MobSF 4.0.5. Check the vendor advisory for mitigations.

References

• https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/fdaad81314f393d324c1ede79627e9d47986c8c8
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8m9j-2f32-2vx4

Get alerted when CVE-2024-41955 or the next vulnerability affects your stack