CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

aomaker (>=2.4.11, <=2.4.13), apidriver (0.9.5) +49 more potentially affected by CVE-2025-23217 via mitmproxy (>=0.17.0, <=11.0.2)

mitmproxy PYPI version =0.17.0, =2.4.11, =1.0.2, =1.0.0, =0.0.1, =2.0.9, =0.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.0, =1.3.0 and more Source cves: CVE-2025-23217 Source advisory: MEND:CVE-2025-23217...

CVE-2025-23217 Mitmweb API Authentication Bypass Using Proxy Server

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

halborn-ctf (>=0.1.0, <=0.1.20) potentially affected by CVE-2025-23217 via mitmproxy (10.3.0)

mitmproxy PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - halborn-ctf =0.1.0, =0.1.20 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2025-23217 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

badger-proxy (0.1.9), kerberos-auth-proxy (>=0.1.0a3, <=0.1.0a8) +5 more potentially affected by CVE-2025-23217 via mitmproxy (8.1.1)

mitmproxy PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - badger-proxy 0.1.9 - kerberos-auth-proxy =0.1.0a3, =2.0.1, =0.1.0, =0.4.0, =0.5.0 Source cves: CVE-2025-23217 Source advisory:...

padsniff (1.1.1) potentially affected by CVE-2025-23217 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by CVE-2025-23217 via mitmproxy (3.0.4)

mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (5.0.1)

mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

hippolyzer (>=0.2.0, <=0.6.3), mitm-chrome (0.1.2) +2 more potentially affected by CVE-2025-23217 via mitmproxy (6.0.2)

mitmproxy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - hippolyzer =0.2.0, =0.1.6, =0.11.3 - xepor 0.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

garbevents (2.0.9), hippolyzer (>=0.7.0, <=0.9.0) +3 more potentially affected by CVE-2025-23217 via mitmproxy (7.0.4)

mitmproxy PYPI version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - garbevents 2.0.9 - hippolyzer =0.7.0, =1.1.1, =0.2.0, =0.3.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

stoobly-agent (>=0.11.4, <=0.34.13) potentially affected by CVE-2025-23217 via mitmproxy (8.1.0)

mitmproxy PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - stoobly-agent =0.11.4, =0.34.13 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

aomaker (>=2.4.11, <=2.4.13), apidriver (0.9.5) +14 more potentially affected by CVE-2025-23217 via mitmproxy (9.0.1)

mitmproxy PYPI version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - aomaker =2.4.11, =0.1.0a0, =0.32.0, =0.32.0, =0.32.0, =0.32.0, =0.3.0, =0.7.2, =0.0.22, =0.3.0, =0.4.2 and more Source cves: CVE-2025-23217...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2025-23217 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

clotho (0.1.0) potentially affected by CVE-2025-23217 via mitmproxy (10.2.2)

mitmproxy PYPI version 10.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - clotho 0.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

kraken-build (>=0.34.0, <=0.35.3), kraken-wrapper (>=0.33.2, <=0.35.3) +4 more potentially affected by CVE-2025-23217 via mitmproxy (10.4.2)

mitmproxy PYPI version 10.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - kraken-build =0.34.0, =0.33.2, =0.11.0, =0.0.2, =0.0.1, =0.0.3 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

cloudflyer (>=1.0.2, <=1.0.5), http-tools (5.0.0) +4 more potentially affected by CVE-2025-23217 via mitmproxy (>=11.0.0, <=11.0.2)

mitmproxy PYPI version =11.0.0, =1.0.2, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =0.2.1 Source cves: CVE-2025-23217 Source advisory: GHSA-WG33-5H85-7Q5P...

lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2025-23217 via mitmproxy (4.0.3)

mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...