Executive brief
Mitmweb API Authentication Bypass Using Proxy Server
Affected products
- PyPI mitmproxy
Junglewise Threat Intelligence
CVE-2025-23217: PYSEC-2026-1630 - Mitmweb API Authentication Bypass Using Proxy Server
CVE-2025-23217 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: mitmproxy (PyPI). Vendors: PyPI.
Related threats
- mitmproxy LDAP injection in LDAP proxy authentication
- PYSEC-2022-170 - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perfo
- PYSEC-2021-328 - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perfo
- PYSEC-2018-56 - mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.