vulnerability

Oracle Linux: CVE-2019-12387: ELSA-2020-1091: python-twisted-web security update (MODERATE) (Multiple Advisories)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:N/C:P/I:P/A:N)	2019-06-10	2022-10-05	2024-11-29

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

2019-06-10

Added

2022-10-05

Modified

2024-11-29

Description

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

Solution

oracle-linux-upgrade-python-twisted-web

References

CVE-2019-12387
https://attackerkb.com/topics/CVE-2019-12387
ELSA-ELSA-2020-1091

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today