Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1.
CVSS Details
- CVSS 3.1 Base Score: 8.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade synapse | Aug 22, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade twisted | Oct 28, 2024 | Jul 29, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Suse | — | Upgrade python-twisted-docUpgrade python-twistedUpgrade python311-Twisted-conchUpgrade python311-TwistedUpgrade python313-Twisted-conch_naclUpgrade python311-Twisted-contextvarsUpgrade python313-TwistedUpgrade python311-Twisted-conch_naclUpgrade python313-Twisted-all_non_platformUpgrade python311-Twisted-http2Upgrade python313-Twisted-serialUpgrade python313-Twisted-contextvarsUpgrade python313-Twisted-conchUpgrade python311-Twisted-tlsUpgrade python311-Twisted-all_non_platformUpgrade python313-Twisted-http2Upgrade python311-Twisted-serialUpgrade python313-Twisted-tlsUpgrade python3-twisted | Aug 6, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade python-twisted (Ubuntu Pro)Upgrade python3-twisted (Ubuntu Pro)Upgrade python3-twisted | Sep 5, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub