What is GHSA-6m53-c78q-7qmg?

GHSA-6m53-c78q-7qmg is a security advisory published by GitHub Security Advisories with Critical severity. Mitmweb in mitmproxy allows DNS Rebinding attacks

Which CVE IDs does GHSA-6m53-c78q-7qmg cover?

GHSA-6m53-c78q-7qmg covers the following CVE IDs: CVE-2018-14505. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6m53-c78q-7qmg?

GHSA-6m53-c78q-7qmg has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-6m53-c78q-7qmg?

GHSA-6m53-c78q-7qmg affects 1 product, including: pip/mitmproxy:\u003c 4.0.4.

GHSA-6m53-c78q-7qmgCriticalCVSS 8.8

Mitmweb in mitmproxy allows DNS Rebinding attacks

Vendor

GitHub Security Advisories

Published

July 31, 2018

Last Modified

October 1, 2024

🔗 CVE IDs covered (1)

CVE-2018-14505 →

📋 Description

mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py.

🎯 Affected products1

pip/mitmproxy:< 4.0.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-14505
https://github.com/mitmproxy/mitmproxy/issues/3234
https://github.com/mitmproxy/mitmproxy/pull/3243
https://github.com/advisories/GHSA-6m53-c78q-7qmg
https://github.com/mitmproxy/mitmproxy/commit/7f464b89296881f4d9ec032378c4418e832d17e3
https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2018-56.yaml