Поиск уязвимостей
Количество 11
Количество 11
CVE-2022-39348
Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds.
CVE-2022-39348
Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds.
CVE-2022-39348
Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds.
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
CVE-2022-39348
Twisted is an event-based framework for internet applications. Started ...
SUSE-SU-2022:4057-1
Security update for python-Twisted
SUSE-SU-2022:4000-1
Security update for python-Twisted
GHSA-vg46-2rrj-3647
Twisted vulnerable to NameVirtualHost Host header injection
BDU:2024-07354
Уязвимость сетевого фреймворка Twisted, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность
ROS-20251226-7302
Уязвимость python-twisted
SUSE-SU-2022:4074-1
Security update for python-Twisted
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-39348 Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds. | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | CVE-2022-39348 Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds. | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | CVE-2022-39348 Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. In practice this should be very difficult to exploit as being able to modify the Host header of a normal HTTP request implies that one is already in a privileged position. This issue was fixed in version 22.10.0rc1. There are no known workarounds. | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | CVE-2022-39348 Twisted vulnerable to NameVirtualHost Host header injection | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
| CVE-2022-39348 Twisted is an event-based framework for internet applications. Started ... | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | SUSE-SU-2022:4057-1 Security update for python-Twisted | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:4000-1 Security update for python-Twisted | 2% Низкий | почти 4 года назад | |
| GHSA-vg46-2rrj-3647 Twisted vulnerable to NameVirtualHost Host header injection | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | BDU:2024-07354 Уязвимость сетевого фреймворка Twisted, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность | CVSS3: 5.4 | 2% Низкий | около 4 лет назад |
 | ROS-20251226-7302 Уязвимость python-twisted | CVSS3: 5.4 | 2% Низкий | 11 месяцев назад |
| SUSE-SU-2022:4074-1 Security update for python-Twisted | почти 4 года назад |
Уязвимостей на страницу