CVE-2025-67485: mad-proxy HTTP/HTTPS Traffic Interception Bypass Vulnerability
Summary
CVE-2025-67485: HTTP/HTTPS Traffic Interception Bypass in mad-proxy. Affects mad-proxy versions < 0.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mad-proxy is an open-source proxy server designed for intercepting and modifying HTTP and HTTPS traffic. It is widely used for debugging and testing web applications by allowing developers to inspect and manipulate requests and responses. However, certain versions of mad-proxy are vulnerable to a traffic interception bypass, which can expose sensitive data to attackers.
Vulnerability Detail
The vulnerability in mad-proxy versions <= 0.3 allows attackers to bypass the intended HTTP/HTTPS traffic interception rules. This flaw can lead to sensitive information being exposed, as the proxy may not properly intercept and log traffic as expected. The issue arises from improper handling of interception rules, which can be exploited by malicious actors to gain unauthorized access to sensitive data transmitted over the network.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can configure mad-proxy to use additional security measures, such as enabling strict SSL verification or implementing network segmentation to limit exposure to sensitive traffic. However, upgrading to the patched version is strongly recommended for a permanent solution.
Conclusion
The mad-proxy vulnerability (CVE-2025-67485) poses a significant risk by allowing attackers to bypass traffic interception rules, potentially exposing sensitive data. It is crucial to update to the latest version to mitigate this risk and ensure the security of your applications.
See every vulnerability recorded for mad-proxy →
FAQ
The CVSS score of this vulnerability is 5.3, indicating a moderate severity level.
mad-proxy versions 0.3 and earlier are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If exploited, this vulnerability can lead to unauthorized access to sensitive HTTP/HTTPS traffic, potentially compromising user data and privacy.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just the Pipfile.lock.
