In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-twisted | Aug 22, 2024 | Mar 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-twisted-web | May 22, 2020 | Mar 12, 2020 |
| Amazon_linux | — | Upgrade python-twisted-web | Jun 4, 2020 | Mar 12, 2020 |
| Centos_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Debian | — | Upgrade twisted | Mar 19, 2020 | Mar 12, 2020 |
| Freebsd | — | Upgrade py35-twistedUpgrade py37-twistedUpgrade py38-twistedUpgrade py36-twistedUpgrade py27-twisted | Apr 22, 2020 | Apr 21, 2020 |
| Gentoo Linux | — | Upgrade dev-python/twisted. | Jul 28, 2020 | Mar 12, 2020 |
| Oracle Solaris | — | Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-34 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-35 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Mar 12, 2020 |
| Oracle_linux | — | Upgrade python-twisted-webUpgrade ol-automation-managerUpgrade python3-olamkitUpgrade ol-automation-manager-cli | Apr 30, 2020 | Mar 11, 2020 |
| Redhat_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Suse | — | Upgrade python-twisted | Aug 9, 2024 | Mar 12, 2020 |
| Ubuntu | — | Upgrade python-twisted-webUpgrade python3-twisted-binUpgrade python-twisted-web (Ubuntu Pro)Upgrade python-twisted (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twisted-binUpgrade python-twisted-bin (Ubuntu Pro)Upgrade python-twisted | Mar 20, 2020 | Mar 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub