What is CVE-2024-53999?

CVE-2024-53999 is a high-severity vulnerability in Mobsf Mobile-security-framework-mobsf, classified under Cross-site Scripting. CVSS score: 8.1/10. Published 2024-12-03.

How severe is CVE-2024-53999?

High severity. CVSS v3 base score is 8.1 out of 10.

XSS in Mobsf Mobile-security-framework-mobsf

CVE-2024-53999

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The application allows users to upload files with scripts in the filename parameter…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.019 (83.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N.

Affected products

Mobsf Mobile-security-framework-mobsf — versions < 4.2.9

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-5jc6-h9w7-jm3p (x_refsource_CONFIRM)
https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/27d165872847f5ae7417caf09f37edeeba741e1e (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-53999?: CVE-2024-53999 is a high-severity vulnerability in Mobsf Mobile-security-framework-mobsf, classified under Cross-site Scripting. CVSS score: 8.1/10. Published 2024-12-03.
How severe is CVE-2024-53999?: High severity. CVSS v3 base score is 8.1 out of 10.