Описание
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 17.9.0-2ubuntu0.1 |
| cosmic | ignored | end of life |
| devel | released | 18.9.0-6ubuntu1 |
| disco | ignored | end of life |
| eoan | released | 18.9.0-3ubuntu1.1 |
| esm-infra-legacy/trusty | released | 13.2.0-1ubuntu1.2+esm1 |
| esm-infra/bionic | released | 17.9.0-2ubuntu0.1 |
| esm-infra/xenial | released | 16.0.0-1ubuntu0.4 |
| precise/esm | not-affected | code not present |
| trusty | ignored | end of standard support |
Показывать по
10
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | |
| upstream | needs-triage |
Показывать по
10
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.5
redhat
больше 6 лет назад
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
CVSS3: 6.1
nvd
больше 6 лет назад
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
CVSS3: 6.1
debian
больше 6 лет назад
In Twisted before 19.2.1, twisted.web did not validate or sanitize URI ...
4.3 Medium
CVSS2
6.1 Medium
CVSS3