Mitmweb in mitmproxy allows DNS Rebinding attacks

ALTO 8.8CVE-2018-14505 · GHSA-6m53-c78q-7qmg · PYSEC-2018-56 · Published 22/07/2018 · updated 17/06/2026

Em resumo

CVE-2018-14505 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta mitmproxy, mitmproxy (mitmproxy).
Chance de exploração nos próximos 30 dias (EPSS): 3.3%, maior que 88.7% das vulnerabilidades.
Correção: atualize para 4.0.4 ou posterior.

Package	Affected versions	Patched versions
mitmproxy PyPI	`< 4.0.4`	`4.0.4`
mitmproxy mitmproxy	`= 4.0.3`	No fix yet

mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py.

NVD description

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 4.0.4

4.0.4

= 4.0.3

No fix yet

Mais vulnerabilidades de mitmproxy

Ver tudo →