In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-twisted | Aug 22, 2024 | Mar 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-twisted-web | May 22, 2020 | Mar 12, 2020 |
| Centos_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Debian | — | Upgrade twisted | Mar 19, 2020 | Mar 12, 2020 |
| Freebsd | — | Upgrade py37-twistedUpgrade py35-twistedUpgrade py36-twistedUpgrade py38-twistedUpgrade py27-twisted | Apr 22, 2020 | Apr 21, 2020 |
| Gentoo Linux | — | Upgrade dev-python/twisted. | Jul 28, 2020 | Mar 12, 2020 |
| Oracle Solaris | — | Upgrade library/python/python-twisted to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-34 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted-27 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade legacy/library/python/python-twisted-35 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/python-twisted-37 to version 18.9.0-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Mar 12, 2020 |
| Oracle_linux | — | Upgrade ol-automation-manager-cliUpgrade python3-olamkitUpgrade python-twisted-webUpgrade ol-automation-manager | Apr 28, 2022 | Mar 11, 2020 |
| Redhat_linux | — | Upgrade python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Suse | — | Upgrade python3-twistedUpgrade python-twistedUpgrade python2-twistedUpgrade python-twisted-doc | Aug 9, 2024 | Mar 12, 2020 |
| Ubuntu | — | Upgrade python3-twistedUpgrade python-twisted-web (Ubuntu Pro)Upgrade python-twistedUpgrade python-twisted (Ubuntu Pro)Upgrade python-twisted-webUpgrade python-twisted-bin (Ubuntu Pro)Upgrade python3-twisted-binUpgrade python-twisted-bin | Mar 20, 2020 | Mar 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub