CVE-2025-58162 — MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any direc…
Published: 2025-09-02 · CVSS: 6.5 · CVSS 3.1
MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7