Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-67485

HTTP/HTTPS Traffic Interception Bypass in mad-proxy

Description

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

machphy mad-proxy

  • <= 0.3affected

References