Mad Proxy
Monthly
Mad-proxy versions 0.3 and earlier fail to enforce their HTTP/HTTPS traffic interception rules, allowing remote, unauthenticated attackers to bypass the proxy's detection and blocking of malicious web activity and potentially expose sensitive traffic that should have been inspected. This protection-mechanism failure (CWE-693) carries a CVSS 5.3 score with only low confidentiality impact, and no public exploit code or active exploitation has been identified (EPSS 0.24%, 14th percentile). Exploitation is only meaningful where mad-proxy is deployed as an enforcement point, and no vendor fix is available at the time of analysis.
Mad-proxy versions 0.3 and earlier fail to enforce their HTTP/HTTPS traffic interception rules, allowing remote, unauthenticated attackers to bypass the proxy's detection and blocking of malicious web activity and potentially expose sensitive traffic that should have been inspected. This protection-mechanism failure (CWE-693) carries a CVSS 5.3 score with only low confidentiality impact, and no public exploit code or active exploitation has been identified (EPSS 0.24%, 14th percentile). Exploitation is only meaningful where mad-proxy is deployed as an enforcement point, and no vendor fix is available at the time of analysis.