Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2732-1

Опубликовано: 05 авг. 2024
Источник: suse-cvrf

Описание

Security update for python-Twisted

This update for python-Twisted fixes the following issues:

  • CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order (bsc#1228549)
  • CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response (bsc#1228552)

Список пакетов

SUSE Linux Enterprise Module for Web and Scripting 12
python-Twisted-15.2.1-9.26.1

Ссылки

Описание

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1.

Затронутые продукты
SUSE Linux Enterprise Module for Web and Scripting 12:python-Twisted-15.2.1-9.26.1
Ссылки

Описание

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.

Затронутые продукты
SUSE Linux Enterprise Module for Web and Scripting 12:python-Twisted-15.2.1-9.26.1
Ссылки