MobSF CSRF Vulnerability After Django Migration: Early Warning

Severity

HIGH

Affected component

mobsf (pypi)

Affected versions

< 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.0.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.2.9 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.0.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or <= 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 0.9.3 or < 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.6 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 4.3.3 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 3.9.8 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= v3.7.6, <= v3.7.6 or >= v3.6.9, <= v3.6.9 or >= v3.6.0, <= v3.6.0 or >= v3.5.0, <= v3.5.0 or >= v3.4.6, <= v3.4.6 or >= v3.4.3, <= v3.4.3 or >= v3.4.0, <= v3.4.0 or >= v3.3.5, <= v3.3.5 or >= v3.3.3, <= v3.3.3 or >= v3.2.9, <= v3.2.9 or >= v3.2.8, <= v3.2.8 or >= v3.2.6, <= v3.2.6 or >= v3.1.1, <= v3.1.1 or >= v3.0.5, <= v3.0.5 or >= v3.0.1, <= v3.0.1 or >= v3.0.0, <= v3.0.0 or >= v2.0.0, <= v2.0.0 or >= v1.1.6, <= v1.1.6 or >= v1.1.5, <= v1.1.5 or >= v1.0.3Beta, <= v1.0.3Beta or >= v0.9.5.5, <= v0.9.5.5 or >= v0.9.5.4, <= v0.9.5.4 or >= v0.9.5.2, <= v0.9.5.2 or >= v0.9.5, <= v0.9.5 or >= v0.9.4.2, <= v0.9.4.2 or >= v0.9.4.1, <= v0.9.4.1 or >= v0.9.4, <= v0.9.4 or >= v0.9.3.7, <= v0.9.3.7 or >= v0.9.3.6, <= v0.9.3.6 or >= v0.9.3.5, <= v0.9.3.5 or >= v0.9.3.3, <= v0.9.3.3 or >= v0.9.3.2, <= v0.9.3.2 or >= v0.9.3.1, <= v0.9.3.1 or >= v0.9.3, <= v0.9.3 or >= v0.9.2, <= v0.9.2 or >= 0.9.1, <= 0.9.1 or >= 0.9, <= 0.9 or >= 0.8.8.2, <= 0.8.8.2 or >= 0.8.8.1, <= 0.8.8.1 or >= 0.8.8, <= 0.8.8 or >= 0.8.7, <= 0.8.7 or >= 0.8.6, <= 0.8.6 or >= 0.8.5, <= 0.8.5 or >= 0.8.4, <= 0.8.4 or >= 0.8.3, <= 0.8.3 or < 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= v4.3.0, <= v4.3.0 or >= v4.1.3, <= v4.1.3 or >= v4.0.7, <= v4.0.7 or >= v3.9.7, <= v3.9.7 or >= v3.7.6, <= v3.7.6 or >= v3.6.9, <= v3.6.9 or >= v3.6.0, <= v3.6.0 or >= v3.5.0, <= v3.5.0 or >= v3.4.6, <= v3.4.6 or >= v3.4.3, <= v3.4.3 or >= v3.4.0, <= v3.4.0 or >= v3.3.5, <= v3.3.5 or >= v3.3.3, <= v3.3.3 or >= v3.2.9, <= v3.2.9 or >= v3.2.8, <= v3.2.8 or >= v3.2.6, <= v3.2.6 or >= v3.1.1, <= v3.1.1 or >= v3.0.5, <= v3.0.5 or >= v3.0.1, <= v3.0.1 or >= v3.0.0, <= v3.0.0 or >= v2.0.0, <= v2.0.0 or >= v1.1.6, <= v1.1.6 or >= v1.1.5, <= v1.1.5 or >= v1.0.3Beta, <= v1.0.3Beta or >= v0.9.5.5, <= v0.9.5.5 or >= v0.9.5.4, <= v0.9.5.4 or >= v0.9.5.2, <= v0.9.5.2 or >= v0.9.5, <= v0.9.5 or >= v0.9.4.2, <= v0.9.4.2 or >= v0.9.4.1, <= v0.9.4.1 or >= v0.9.4, <= v0.9.4 or >= v0.9.3.7, <= v0.9.3.7 or >= v0.9.3.6, <= v0.9.3.6 or >= v0.9.3.5, <= v0.9.3.5 or >= v0.9.3.3, <= v0.9.3.3 or >= v0.9.3.2, <= v0.9.3.2 or >= v0.9.3.1, <= v0.9.3.1 or >= v0.9.3, <= v0.9.3 or >= v0.9.2, <= v0.9.2 or >= 0.9.1, <= 0.9.1 or >= 0.9, <= 0.9 or >= 0.8.8.2, <= 0.8.8.2 or >= 0.8.8.1, <= 0.8.8.1 or >= 0.8.8, <= 0.8.8 or >= 0.8.7, <= 0.8.7 or >= 0.8.6, <= 0.8.6 or >= 0.8.5, <= 0.8.5 or >= 0.8.4, <= 0.8.4 or >= 0.8.3, <= 0.8.3 or < 4.0.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.2.9 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or < 4.0.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or <= 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.3.3 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 3.9.8 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.4.6 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 0.9.3

Patched version

Not yet available

MobSF's CSRF checks are reportedly not enforced after a Django migration, potentially exposing authenticated web POST endpoints to unauthorized requests.

What happened

An early warning has been issued regarding a vulnerability in MobSF where CSRF checks are not enforced after a Django migration. This issue allows authenticated web POST endpoints to accept requests without CSRF tokens, which could lead to unauthorized actions. The vulnerability affects various versions of MobSF, as detailed in the affected components section. It is crucial for users to assess their exposure and take appropriate action to secure their instances.

The vulnerability was first flagged on August 18, 2026. It is currently under investigation, and no exploitation in the wild has been confirmed. Users are advised to consult the primary sources for the most up-to-date information and to implement the recommended mitigation steps to protect their systems.

What to do about it

• Upgrade MobSF to a version that enforces CSRF checks.
• Manually add 'django.middleware.csrf.CsrfViewMiddleware' to the MIDDLEWARE tuple in settings.py if upgrading is not immediately feasible.
• Monitor the primary sources for updates on the vulnerability and any official fixes that may be released.
• Review your MobSF configuration to ensure that all security measures are properly implemented.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-3p54-567p-2wpr] MobSF's CSRF checks not enforced after Django migration

Join the 0Day waitlist →

← Back to all threats