CyberSecBulletin

Mitmproxy vulnerabilities

We track 2 vulnerabilities in Mitmproxy products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2025.

2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score

Latest Mitmproxy vulnerabilities

  • 8.2 High severity

    mitmproxy: Authentication Bypass Using an Alternate Path or Channel

    CVE-2025-23217Mitmproxy

    mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server (bound to `*:8080`

  • 9.8 Critical severity

    mitmproxy: Inconsistent Interpretation of HTTP Requests

    CVE-2022-24766MitmproxyEPSS 1.63%

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/r