In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-py3-twisted | Aug 22, 2024 | Mar 12, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python-twisted-web | May 22, 2020 | Mar 12, 2020 | |
| Centos_linux | — | centos-upgrade-python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Debian | debian-upgrade-twisted | Mar 19, 2020 | Mar 12, 2020 | |
| Freebsd | freebsd-upgrade-package-py27-twistedfreebsd-upgrade-package-py35-twistedfreebsd-upgrade-package-py36-twistedfreebsd-upgrade-package-py37-twistedfreebsd-upgrade-package-py38-twisted | Apr 22, 2020 | Apr 21, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-python-twisted | Jul 28, 2020 | Mar 12, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-legacy-library-python-python-twisted-34-18-9-0-11-4-24-0-1-75-1oracle-solaris-11-4-upgrade-legacy-library-python-python-twisted-35-18-9-0-11-4-24-0-1-75-1oracle-solaris-11-4-upgrade-library-python-python-twisted-18-9-0-11-4-24-0-1-75-1oracle-solaris-11-4-upgrade-library-python-python-twisted-27-18-9-0-11-4-24-0-1-75-1oracle-solaris-11-4-upgrade-library-python-python-twisted-37-18-9-0-11-4-24-0-1-75-1 | Jan 19, 2021 | Mar 12, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-ol-automation-manageroracle-linux-upgrade-ol-automation-manager-clioracle-linux-upgrade-python3-olamkitoracle-linux-upgrade-python-twisted-web | Apr 28, 2022 | Mar 11, 2020 |
| Redhat_linux | — | redhat-upgrade-python-twisted-web | Apr 24, 2020 | Mar 12, 2020 |
| Suse | — | suse-upgrade-python-twistedsuse-upgrade-python-twisted-docsuse-upgrade-python2-twistedsuse-upgrade-python3-twisted | Aug 9, 2024 | Mar 12, 2020 |
| Ubuntu | ubuntu-pro-upgrade-python-twistedubuntu-pro-upgrade-python-twisted-binubuntu-pro-upgrade-python-twisted-webubuntu-upgrade-python-twistedubuntu-upgrade-python-twisted-binubuntu-upgrade-python-twisted-webubuntu-upgrade-python3-twistedubuntu-upgrade-python3-twisted-bin | Mar 20, 2020 | Mar 12, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub