CVE-2025-67485: mad-proxy HTTP/HTTPS Traffic Interception Bypass Vulnerability
Summary
CVE-2025-67485: HTTP/HTTPS Traffic Interception Bypass in mad-proxy. Affects mad-proxy versions < 0.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mad-proxy is an open-source proxy tool designed to intercept and manipulate HTTP and HTTPS traffic. It is widely used for debugging and testing web applications by allowing developers to inspect and modify requests and responses. However, certain versions of mad-proxy are vulnerable to a traffic interception bypass, which can expose sensitive data to attackers.
Vulnerability Detail
A vulnerability exists in mad-proxy versions 0.3 and earlier that allows attackers to bypass the HTTP/HTTPS traffic interception rules. This flaw can lead to sensitive information being exposed, as the proxy fails to properly enforce interception policies. The vulnerability arises from improper handling of traffic rules, making it possible for malicious actors to exploit the system without detection.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can implement additional network security measures, such as using a VPN or firewall rules to restrict access to sensitive data while waiting for the patch to be applied.
Conclusion
The mad-proxy vulnerability (CVE-2025-67485) poses a significant risk by allowing attackers to bypass traffic interception rules, potentially exposing sensitive data. It is crucial to update to a patched version of mad-proxy and implement additional security measures to mitigate risks.
See every vulnerability recorded for mad-proxy →
FAQ
The CVSS score of this vulnerability is 5.3, indicating a moderate level of severity.
mad-proxy versions 0.3 and earlier are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The potential risks include exposure of sensitive traffic, which could lead to data breaches or unauthorized access to confidential information.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just the Pipfile.lock.
