SUSE CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

PT-2025-5851 · Mitmproxy +3 · Mitmproxy +3

Name of the Vulnerable Software and Affected Versions: mitmweb versions 11.1.1 and below mitmproxy versions 11.1.1 and below Description: A malicious client can use mitmweb's proxy server to access mitmweb's internal API, potentially leading to remote code execution. The mitmproxy and mitmdump...