THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-3p54-567p-2wpr (medium) — MobSF's CSRF checks not enforced after Django migration

[GHSA] GHSA-3p54-567p-2wpr (medium) — MobSF's CSRF checks not enforced after Django migration

highgithub_advisoriesPublished 2026-08-18

GHSA-3p54-567p-2wpr Severity: medium CVE: CVE-2026-68923

MobSF's CSRF checks not enforced after Django migration

### Summary

Django's `CsrfViewMiddleware` exists only in the deprecated `MIDDLEWARE_CLASSES` (ignored since Django 2.0). The active `MIDDLEWARE` tuple does not include it. All authenticated web POST endpoints (delete scan, upload, download APK, change password, manage users) accept r

Indicators of compromise

68e76627798d62555d5287f4488a32c7md5
CVE-2026-68923cve
http://127.0.0.1:8000/delete_scan/url
http://127.0.0.1:8000/login/`url

Original source: https://github.com/advisories/GHSA-3p54-567p-2wpr