CVE-2018-14505: Input Validation
Published Jul 22, 2018
·Updated
mitmweb in mitmproxy before v4.0.4 allows DNS Rebinding attacks, related to tools/web/app.py.
Other sources
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
Affected Software
2 affected componentsFixes available
pip/mitmproxy<4.0.4
4.0.4
mitmproxy mitmproxy=4.0.3
Event History
Jul 22, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Jul 31, 2018
Advisory Published
via GitHub·06:18 PM
Frequently Asked Questions
1
What is the severity of CVE-2018-14505?
CVE-2018-14505 is classified as a medium severity vulnerability due to the potential for DNS Rebinding attacks.
2
How do I fix CVE-2018-14505?
To fix CVE-2018-14505, upgrade mitmproxy to version 4.0.4 or later.
3
Which versions of mitmproxy are affected by CVE-2018-14505?
Mitmproxy versions prior to 4.0.4, specifically 4.0.3, are affected by CVE-2018-14505.
4
What kind of attacks does CVE-2018-14505 allow?
CVE-2018-14505 allows for DNS Rebinding attacks, potentially compromising user security.
5
Is CVE-2018-14505 specific to any operating system?
CVE-2018-14505 impacts the mitmproxy application regardless of the operating system it runs on.