Executive brief
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
Affected products
- PyPI mitmproxy
Junglewise Threat Intelligence
CVE-2018-14505: PYSEC-2018-56 - mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
CVE-2018-14505 · Severity: low · CVSS 3 · Published 2018-07-22
Vendors: PyPI.
Related threats
- PYSEC-2026-1630 - Mitmweb API Authentication Bypass Using Proxy Server
- mitmproxy LDAP injection in LDAP proxy authentication
- PYSEC-2022-170 - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perfo
- PYSEC-2021-328 - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perfo