GHSA-6m53-c78q-7qmg
Mitmweb in mitmproxy allows DNS Rebinding attacks
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2018-14505
- https://github.com/mitmproxy/mitmproxy/issues/3234
- https://github.com/mitmproxy/mitmproxy/pull/3243
- https://github.com/mitmproxy/mitmproxy/commit/7f464b89296881f4d9ec032378c4418e832d17e3
- https://github.com/advisories/GHSA-6m53-c78q-7qmg
- https://github.com/mitmproxy/mitmproxy
- https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2018-56.yaml