http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2022-24766 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2022-24766 via mitmproxy (5.0.1)

mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

garbevents (2.0.9), hippolyzer (>=0.7.0, <=0.9.0) +3 more potentially affected by CVE-2022-24766 via mitmproxy (7.0.4)

mitmproxy PYPI version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - garbevents 2.0.9 - hippolyzer =0.7.0, =1.1.1, =0.2.0, =0.3.0 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2022-24766 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

hippolyzer (>=0.2.0, <=0.6.3), mitm-chrome (0.1.2) +2 more potentially affected by CVE-2022-24766 via mitmproxy (6.0.2)

mitmproxy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - hippolyzer =0.2.0, =0.1.6, =0.11.3 - xepor 0.1.0 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2022-24766 via mitmproxy (4.0.3)

mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

eavesdropper (>=0.0.1, <=0.0.5), goth (>=0.1.0, <=0.16.0) +3 more potentially affected by CVE-2022-24766 via mitmproxy (5.3.0)

mitmproxy PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - eavesdropper =0.0.1, =0.1.0, =0.16.0 - http-tools 2.0.0 - iiintent 0.42.11 - mitm-chrome 0.1.1 Source cves: CVE-2022-24766 Source advisory:...

padsniff (1.1.1) potentially affected by CVE-2022-24766 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2022-24766 Source advisory: OSV:PYSEC-2022-170...

PYSEC-2022-170

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766 Insufficient Protection against HTTP Request Smuggling in mitmproxy

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766

Mitmproxy vulnerability CVE-2022-24766 affects mitmproxy

CVE-2022-24766 Insufficient Protection against HTTP Request Smuggling in mitmproxy

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766 Insufficient Protection against HTTP Request Smuggling in mitmproxy

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

comics-down (0.2.0), eavesdropper (>=0.0.1, <=0.0.5) +18 more potentially affected by CVE-2022-24766 via mitmproxy (>=0.17.0, <=7.0.4)

mitmproxy PYPI version =0.17.0, =0.0.1, =0.1.0, =0.2.0, =1.0.1, =0.10.4, =0.1.1, =0.1.2, =1.2.1, =0.9.0, =1.5.33, =1.5.41 - pymultitor 2.1.0 and more Source cves: CVE-2022-24766 Source advisory: MEND:CVE-2022-24766...

PT-2022-16864 · Mitmproxy +1 · Mitmproxy +1

Name of the Vulnerable Software and Affected Versions: mitmproxy versions 7.0.4 and below Description: A malicious client or server can perform HTTP request smuggling attacks through mitmproxy. This means a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2022-24766: Inconsistent Interpretation of HTTP Requests

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

mitmproxy 环境问题漏洞

mitmproxy is an interactive, SSL/TLS-enabled interceptor proxy with a console interface for HTTP/1, HTTP/2, and WebSockets. A security vulnerability exists in mitmproxy version 7.0.4 and prior versions, which can be exploited by malicious clients or servers to perform request smuggling attacks vi...

mitmproxy -- Insufficient Protection against HTTP Request Smuggling

Zeyu Zhang reports: In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of another request/response's HTTP message body...