Количество 11
Количество 11
BDU:2024-01299
Уязвимость компонента twisted.web сетевого фреймворка Twisted, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
ROS-20250905-02
Уязвимость python3-twisted
CVE-2023-46137
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.
CVE-2023-46137
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.
CVE-2023-46137
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.
CVE-2023-46137
twisted.web has disordered HTTP pipeline response
CVE-2023-46137
Twisted is an event-based framework for internet applications. Prior t ...
SUSE-SU-2023:4830-1
Security update for python-Twisted
SUSE-SU-2023:4608-1
Security update for python-Twisted
SUSE-SU-2023:4607-1
Security update for python3-Twisted
GHSA-xc8x-vp79-p3wm
twisted.web has disordered HTTP pipeline response
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-01299 Уязвимость компонента twisted.web сетевого фреймворка Twisted, позволяющая нарушителю оказать воздействие на целостность защищаемой информации | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
 | ROS-20250905-02 Уязвимость python3-twisted | CVSS3: 5.3 | 1% Низкий | 11 месяцев назад |
 | CVE-2023-46137 Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue. | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
 | CVE-2023-46137 Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue. | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
 | CVE-2023-46137 Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue. | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
 | CVE-2023-46137 twisted.web has disordered HTTP pipeline response | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
| CVE-2023-46137 Twisted is an event-based framework for internet applications. Prior t ... | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
 | SUSE-SU-2023:4830-1 Security update for python-Twisted | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2023:4608-1 Security update for python-Twisted | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2023:4607-1 Security update for python3-Twisted | 1% Низкий | больше 2 лет назад | |
| GHSA-xc8x-vp79-p3wm twisted.web has disordered HTTP pipeline response | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
Уязвимостей на страницу