p PatchFirst

CVE-2025-67485

CVE-2025-67485 · HTTP/HTTPS Traffic Interception Bypass in mad-proxy

This page contains facts from public vulnerability sources. Check the original advisory before updating.

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.

CVSS 5.3 · Medium · EPSS 0.2%

Published
Updated

Stack: python

Affected products and versions

  • mad-proxy

    Versions
    • <= 0.3: Affected

    No fix published

  • mad-proxy PyPI

    Versions
    • 0.1
    • 0.2
    • 0.3
    Affected ranges
    • ECOSYSTEM: ≤ 0.3

    No fix published

Original sources

Check your server →