PT-2025-5851 · Mitmdump+3 · Mitmdump+3

Gronke · Published 2025-02-06 · Updated 2025-02-10 · CVE-2025-23217

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions mitmweb versions 11.1.1 and below mitmproxy versions 11.1.1 and below

Description A malicious client can use mitmweb's proxy server to access mitmweb's internal API, potentially leading to remote code execution. The mitmproxy and mitmdump tools are unaffected. Only mitmweb is affected. The vulnerability can be exploited by an attacker in the same local network, as the block global option blocks connections from publicly-routable IP addresses.

Recommendations For mitmweb versions 11.1.1 and below, update to mitmproxy 11.1.2 or above to fix the vulnerability. For mitmproxy versions 11.1.1 and below, update to mitmproxy 11.1.2 or above to fix the vulnerability. As a temporary workaround, consider restricting access to the internal API endpoint 127.0.0.1:8081 to minimize the risk of exploitation. Restrict access to the proxy server bound to *:8080 to prevent unauthorized access.

Exploit

Fix

RCE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

CWE-441

Related Identifiers

CVE-2025-23217

GHSA-WG33-5H85-7Q5P

OPENSUSE-SU-2025:14762-1

Affected Products

Debian

Mitmdump

Mitmproxy

Mitmweb

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23217.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-23217 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23217 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-23217 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14762-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23217 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-23217 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wg33-5h85-7q5p · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-23217 · Vendor Advisory
• https://github.com/mitmproxy/mitmproxy · Note
• https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md#06-february-2025-mitmproxy-1112 · Note
• https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-wg33-5h85-7q5p · Note
• https://github.com/mitmproxy/mitmproxy/commit/fa89055e196d953f11fd241e36ee37858993486a · Note
• https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md · Note