PT-2019-20145 · Twisted Matrix Laboratories · Twisted

Publicado 2019-06-10 · Atualizado 2019-06-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 19.2.1

Description The issue allows an attacker to inject invalid characters, such as CRLF, into URIs or HTTP methods due to a lack of validation or sanitization in the twisted.web module.

Recommendations For versions prior to 19.2.1, update to version 19.2.1 or later to resolve the issue.

Identificadores relacionados

PYSEC-2019-58

Produtos afetados

Twisted

Referências · 10

• https://github.com/twisted/twisted/commit/6c61fc4503ae39ab8ecee52d10f10ee2c371d7e2 · Nota
• https://oracle.com/security-alerts/cpuapr2020.html · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/2G5RPDQ4BNB336HL6WW5ZJ344MAWNN7N · Aviso do Fabricante
• https://usn.ubuntu.com/4308-2 · Nota
• https://usn.ubuntu.com/4308-1 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00042.html · Nota
• https://twistedmatrix.com/pipermail/twisted-python/2019-June/032352.html · Nota
• https://osv.dev/vulnerability/PYSEC-2019-58 · Aviso do Fabricante
• https://labs.twistedmatrix.com/2019/06/twisted-1921-released.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00030.html · Nota