eavesdropper (>=0.0.1, <=0.0.5), goth (>=0.1.0, <=0.16.0) +3 more potentially affected by CVE-2025-23217 via mitmproxy (5.3.0)

mitmproxy PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - eavesdropper =0.0.1, =0.1.0, =0.16.0 - http-tools 2.0.0 - iiintent 0.42.11 - mitm-chrome 0.1.1 Source cves: CVE-2025-23217 Source advisory:...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

halborn-ctf (>=0.1.0, <=0.1.20) potentially affected by CVE-2025-23217 via mitmproxy (10.3.0)

mitmproxy PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - halborn-ctf =0.1.0, =0.1.20 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2025-23217 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...

colordove-auto (>=1.0.0, <=1.0.57), garbevents (>=2.1.0, <=2.1.9) +6 more potentially affected by CVE-2025-23217 via mitmproxy (8.0.0)

mitmproxy PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - colordove-auto =1.0.0, =2.1.0, =0.10.0, =1.0.5, =1.0.1, =1.0.1, =1.0.3, =3.1.3, =3.1.4 Source cves: CVE-2025-23217 Source advisory:...

CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217 Mitmweb API Authentication Bypass Using Proxy Server

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

aomaker (>=2.4.11, <=2.4.13), apidriver (0.9.5) +49 more potentially affected by CVE-2025-23217 via mitmproxy (>=0.17.0, <=11.0.2)

mitmproxy PYPI version =0.17.0, =2.4.11, =1.0.2, =1.0.0, =0.0.1, =2.0.9, =0.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.0, =1.3.0 and more Source cves: CVE-2025-23217 Source advisory: MEND:CVE-2025-23217...

CVE-2025-23217 Mitmweb API Authentication Bypass Using Proxy Server

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217 Mitmweb API Authentication Bypass Using Proxy Server

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217

CVE-2025-23217 affects mitmweb (the web UI of mitmproxy). In versions 11.1.1 and earlier, a malicious client connected to mitmweb’s proxy server (default bind 0.0.0.0:8080) could reach mitmweb’s internal API (127.0.0.1:8081) through the proxy, enabling SSRF-style access that may lead to remote co...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2025-23217 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

eavesdropper (>=0.0.1, <=0.0.5), goth (>=0.1.0, <=0.16.0) +3 more potentially affected by CVE-2025-23217 via mitmproxy (5.3.0)

mitmproxy PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - eavesdropper =0.0.1, =0.1.0, =0.16.0 - http-tools 2.0.0 - iiintent 0.42.11 - mitm-chrome 0.1.1 Source cves: CVE-2025-23217 Source advisory:...

stoobly-agent (>=0.11.4, <=0.34.13) potentially affected by CVE-2025-23217 via mitmproxy (8.1.0)

mitmproxy PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - stoobly-agent =0.11.4, =0.34.13 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

wapiti3 (>=3.1.5, <=3.1.8) potentially affected by CVE-2025-23217 via mitmproxy (9.0.0)

mitmproxy PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - wapiti3 =3.1.5, =3.1.8 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

uproxier (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-23217 via mitmproxy (10.2.4)

mitmproxy PYPI version 10.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - uproxier =0.1.0, =0.2.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

halborn-ctf (>=0.1.0, <=0.1.20) potentially affected by CVE-2025-23217 via mitmproxy (10.3.0)

mitmproxy PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - halborn-ctf =0.1.0, =0.1.20 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...