The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade twisted | Oct 28, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Suse | — | Upgrade python311-Twisted-http2Upgrade python311-Twisted-serialUpgrade python313-Twisted-http2Upgrade python313-Twisted-all_non_platformUpgrade python313-Twisted-conchUpgrade python313-Twisted-serialUpgrade python313-Twisted-conch_naclUpgrade python311-Twisted-all_non_platformUpgrade python311-Twisted-tlsUpgrade python3-twistedUpgrade python313-TwistedUpgrade python311-Twisted-conch_naclUpgrade python313-Twisted-tlsUpgrade python-twisted-docUpgrade python-twistedUpgrade python311-TwistedUpgrade python313-Twisted-contextvarsUpgrade python311-Twisted-contextvarsUpgrade python311-Twisted-conch | Aug 6, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade python3-twisted (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twisted (Ubuntu Pro) | Sep 5, 2024 | Jul 29, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub