MobSF CSRF Checks Not Enforced After Django Migration

Severity

HIGH

Affected component

mobsf (pypi)

Affected versions

< 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.0.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.2.9 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.0.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or <= 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 0.9.3 or < 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.6 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 4.3.3 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 3.9.8 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.5.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or < 3.9.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= v3.7.6, <= v3.7.6 or >= v3.6.9, <= v3.6.9 or >= v3.6.0, <= v3.6.0 or >= v3.5.0, <= v3.5.0 or >= v3.4.6, <= v3.4.6 or >= v3.4.3, <= v3.4.3 or >= v3.4.0, <= v3.4.0 or >= v3.3.5, <= v3.3.5 or >= v3.3.3, <= v3.3.3 or >= v3.2.9, <= v3.2.9 or >= v3.2.8, <= v3.2.8 or >= v3.2.6, <= v3.2.6 or >= v3.1.1, <= v3.1.1 or >= v3.0.5, <= v3.0.5 or >= v3.0.1, <= v3.0.1 or >= v3.0.0, <= v3.0.0 or >= v2.0.0, <= v2.0.0 or >= v1.1.6, <= v1.1.6 or >= v1.1.5, <= v1.1.5 or >= v1.0.3Beta, <= v1.0.3Beta or >= v0.9.5.5, <= v0.9.5.5 or >= v0.9.5.4, <= v0.9.5.4 or >= v0.9.5.2, <= v0.9.5.2 or >= v0.9.5, <= v0.9.5 or >= v0.9.4.2, <= v0.9.4.2 or >= v0.9.4.1, <= v0.9.4.1 or >= v0.9.4, <= v0.9.4 or >= v0.9.3.7, <= v0.9.3.7 or >= v0.9.3.6, <= v0.9.3.6 or >= v0.9.3.5, <= v0.9.3.5 or >= v0.9.3.3, <= v0.9.3.3 or >= v0.9.3.2, <= v0.9.3.2 or >= v0.9.3.1, <= v0.9.3.1 or >= v0.9.3, <= v0.9.3 or >= v0.9.2, <= v0.9.2 or >= 0.9.1, <= 0.9.1 or >= 0.9, <= 0.9 or >= 0.8.8.2, <= 0.8.8.2 or >= 0.8.8.1, <= 0.8.8.1 or >= 0.8.8, <= 0.8.8 or >= 0.8.7, <= 0.8.7 or >= 0.8.6, <= 0.8.6 or >= 0.8.5, <= 0.8.5 or >= 0.8.4, <= 0.8.4 or >= 0.8.3, <= 0.8.3 or < 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= v4.3.0, <= v4.3.0 or >= v4.1.3, <= v4.1.3 or >= v4.0.7, <= v4.0.7 or >= v3.9.7, <= v3.9.7 or >= v3.7.6, <= v3.7.6 or >= v3.6.9, <= v3.6.9 or >= v3.6.0, <= v3.6.0 or >= v3.5.0, <= v3.5.0 or >= v3.4.6, <= v3.4.6 or >= v3.4.3, <= v3.4.3 or >= v3.4.0, <= v3.4.0 or >= v3.3.5, <= v3.3.5 or >= v3.3.3, <= v3.3.3 or >= v3.2.9, <= v3.2.9 or >= v3.2.8, <= v3.2.8 or >= v3.2.6, <= v3.2.6 or >= v3.1.1, <= v3.1.1 or >= v3.0.5, <= v3.0.5 or >= v3.0.1, <= v3.0.1 or >= v3.0.0, <= v3.0.0 or >= v2.0.0, <= v2.0.0 or >= v1.1.6, <= v1.1.6 or >= v1.1.5, <= v1.1.5 or >= v1.0.3Beta, <= v1.0.3Beta or >= v0.9.5.5, <= v0.9.5.5 or >= v0.9.5.4, <= v0.9.5.4 or >= v0.9.5.2, <= v0.9.5.2 or >= v0.9.5, <= v0.9.5 or >= v0.9.4.2, <= v0.9.4.2 or >= v0.9.4.1, <= v0.9.4.1 or >= v0.9.4, <= v0.9.4 or >= v0.9.3.7, <= v0.9.3.7 or >= v0.9.3.6, <= v0.9.3.6 or >= v0.9.3.5, <= v0.9.3.5 or >= v0.9.3.3, <= v0.9.3.3 or >= v0.9.3.2, <= v0.9.3.2 or >= v0.9.3.1, <= v0.9.3.1 or >= v0.9.3, <= v0.9.3 or >= v0.9.2, <= v0.9.2 or >= 0.9.1, <= 0.9.1 or >= 0.9, <= 0.9 or >= 0.8.8.2, <= 0.8.8.2 or >= 0.8.8.1, <= 0.8.8.1 or >= 0.8.8, <= 0.8.8 or >= 0.8.7, <= 0.8.7 or >= 0.8.6, <= 0.8.6 or >= 0.8.5, <= 0.8.5 or >= 0.8.4, <= 0.8.4 or >= 0.8.3, <= 0.8.3 or < 4.0.7 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.2.9 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.4.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or < 4.0.5 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or <= 4.3.2 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 4.4.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.3.1 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or < 4.3.3 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or < 3.9.8 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or < 4.4.6 or >= 3.2.6, <= 3.2.6 or >= 3.2.7, <= 3.2.7 or >= 3.2.8, <= 3.2.8 or >= 3.2.9, <= 3.2.9 or >= 3.3.3, <= 3.3.3 or >= 3.3.5, <= 3.3.5 or >= 3.4.0, <= 3.4.0 or >= 3.4.3, <= 3.4.3 or >= 3.4.6, <= 3.4.6 or >= 3.5.0, <= 3.5.0 or >= 3.6.0, <= 3.6.0 or >= 3.6.9, <= 3.6.9 or >= 3.7.6, <= 3.7.6 or >= 3.9.7, <= 3.9.7 or >= 4.1.3, <= 4.1.3 or >= 4.3.0, <= 4.3.0 or >= 4.3.2, <= 4.3.2 or >= 4.4.0, <= 4.4.0 or >= 4.4.2, <= 4.4.2 or >= 4.4.5, <= 4.4.5 or < 0.9.3

Patched version

Not yet available

An early warning reports that MobSF's CSRF checks are not enforced after a Django migration, potentially affecting authenticated web POST endpoints.

What happened

An early warning indicates that MobSF's CSRF checks are not enforced after a Django migration. This issue allows authenticated web POST endpoints to accept requests without CSRF tokens, which could lead to security vulnerabilities. The affected versions include a wide range of MobSF releases, as detailed in the threat data.

The vulnerability has not been exploited in the wild as of the latest information. However, it is crucial for users to assess their exposure and take appropriate mitigation steps to secure their applications.

What to do about it

• Upgrade MobSF to a version that enforces CSRF checks.
• Implement CSRF protection middleware manually if upgrading is not immediately feasible.
• Monitor the primary sources for updates on patched versions and further guidance.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-3p54-567p-2wpr] MobSF's CSRF checks not enforced after Django migration

Join the 0Day waitlist →

← Back to all threats