PyPI/mitmproxy CVE-2018-14505: unknown, EPSS 3.35%

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

Action: Upgrade mitmproxy to 4.0.4 or later.

pip install mitmproxy==4.0.4

Affected

Fixed versions

Sources

• osv: PYSEC-2018-56
• https://github.com/mitmproxy/mitmproxy/pull/3243
• https://github.com/mitmproxy/mitmproxy/issues/3234
• https://github.com/advisories/GHSA-6m53-c78q-7qmg

CVE-2018-14505 · published 2018-07-22T18:29:00Z · modified 2023-11-08T03:59:55.280113Z · JSON