In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-twisted | Aug 22, 2024 | Jun 10, 2019 |
| Centos_linux | — | Upgrade python-twisted-web | Apr 1, 2020 | Jun 10, 2019 |
| Debian | — | Upgrade twisted | Jul 30, 2024 | Jun 10, 2019 |
| Freebsd | — | Upgrade py38-twistedUpgrade py35-twistedUpgrade py37-twistedUpgrade py27-twistedUpgrade py36-twisted | Apr 22, 2020 | Apr 21, 2020 |
| Oracle Solaris | — | Upgrade library/python/pyparsing-35 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-35 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-37 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-34 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-35 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-34 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial-27 to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-27 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-35 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/wcwidth-34 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-34 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/cython to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-27 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-35 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-34 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-37 to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-34 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-37 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-34 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-27 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-27 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/rpdb-34 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial to version 4.9.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-27 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-34 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-37 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-37 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-37 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-34 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-34 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-34 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-37 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-35 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-27 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-37 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-34 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade compress/gzip to version 1.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-34 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-27 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-27 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-34 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-35 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/oracle/odpi-230 to version 2.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/wcwidth-37 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-37 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-35 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-37 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-27 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-37 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-34 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-35 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-34 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-27 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-35 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-35 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-35 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-37 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.17-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-35 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade developer/gcc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-34 to version 0.6.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-twisted-web2 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyparsing-37 to version 2.4.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-34 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/python-twisted-web2-27 to version 8.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cryptography-27 to version 2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git-27 to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-27 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade text/texinfo to version 6.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-34 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-27 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-37 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cheroot-35 to version 6.3.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/colorama-35 to version 0.4.1-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid to version 2.2.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-34 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-appconf-27 to version 1.0.2-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest-35 to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cython-35 to version 0.29.14-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-35 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-27 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/libxml2 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/python-hamcrest to version 1.9.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat-27 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/automat to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/constantly-27 to version 15.1.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/astroid-34 to version 1.4.8-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/idna-37 to version 2.8-11.4.19.0.1.2.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-27 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-27 to version 5.1.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/hyperlink-37 to version 19.0.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-35 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/libxml2-27 to version 2.9.9-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/versioning/mercurial/hg-git to version 0.8.12-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cx_oracle-37 to version 6.3-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pillow-35 to version 7.0.0-11.4.19.0.1.2.0 on Solaris 11.4Upgrade library/python/automat-34 to version 0.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2-27 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/cmd2-37 to version 0.9.13-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/incremental-37 to version 17.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyatspi2 to version 2.18.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.10-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/pyperclip-27 to version 1.7.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/wcwidth-35 to version 0.1.7-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/rpdb-35 to version 0.1.6-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/django to version 1.11.27-11.4.19.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-5 to version 5.5.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-7 to version 7.3.0-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/webob-37 to version 1.8.5-11.4.19.0.1.1.0 on Solaris 11.4Upgrade library/python/xattr-27 to version 0.9.3-11.4.19.0.1.1.0 on Solaris 11.4 | Jan 19, 2021 | Jun 10, 2019 |
| Oracle_linux | — | Upgrade python-twisted-web | Oct 5, 2022 | Jun 10, 2019 |
| Redhat_linux | — | No solution existsUpgrade python-twisted-web | Apr 1, 2020 | Jun 10, 2019 |
| Suse | — | Upgrade python3-twistedUpgrade python-twisted-docUpgrade python-twistedUpgrade python2-twisted | Jul 22, 2019 | Jun 10, 2019 |
| Ubuntu | — | Upgrade python-twisted-bin (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twisted (Ubuntu Pro)Upgrade python-twistedUpgrade python-twisted-web (Ubuntu Pro)Upgrade python-twisted-webUpgrade python3-twisted-binUpgrade python-twisted-bin | Mar 20, 2020 | Jun 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 10, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub