Detections
Analytics
SCA: security update for mitmproxy (GHSA-wg33-5h85-7q5p)
high Tenable Self-Hosted Container Security Plugin ID 420839
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software
developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious
client can use mitmweb's proxy server (bound to `*:8080` by default) to access mitmweb's internal API
(bound to `127.0.0.1:8081` by default). In other words, while the cannot access the API directly, they can
access the API through the proxy. An attacker may be able to escalate this SSRF-style access to remote
code execution. The mitmproxy and mitmdump tools are unaffected. Only mitmweb is affected. This
vulnerability has been fixed in mitmproxy 11.1.2 and above. Users are advised to upgrade. There are no
known workarounds for this vulnerability. (CVE-2025-23217)
See Also
Plugin Details
Severity: High
ID: 420839
Version: Revision 1.14
Type: Local
Family: SCA Checks
Published: 2/6/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.75
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2025-23217
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.2
Threat Score: 4.6
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 2/6/2025
Vulnerability Publication Date: 2/6/2025
Reference Information
CVE: CVE-2025-23217