mitmproxy LDAP Authentication Bypass Vulnerability

A vulnerability exists in mitmproxy versions through 12.2.1 in the built-in LDAP proxy authentication. The issue arises because the username is not properly sanitized before querying the LDAP server, allowing a malicious client to bypass authentication. This vulnerability affects only mitmproxy instances that have the proxyauth option enabled for LDAP, a setting that is not activated by default.

Impact

Exploitation of this vulnerability allows for unauthorized access by bypassing LDAP authentication.

Remediation

Users can upgrade to mitmproxy version 12.2.2 or later to address this vulnerability.