Description
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
Published: 2019-06-10
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2019-0146 In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
Github GHSA Github GHSA GHSA-6cc5-2vg4-cc7m Twisted CRLF Injection
Ubuntu USN Ubuntu USN USN-4308-1 Twisted vulnerabilities
Ubuntu USN Ubuntu USN USN-4308-2 Twisted vulnerabilities
History

Mon, 25 Nov 2024 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Twisted
Twisted twisted
CPEs cpe:2.3:a:twistedmatrix:twisted:*:*:*:*:*:*:*:* cpe:2.3:a:twisted:twisted:*:*:*:*:*:*:*:*
Vendors & Products Twistedmatrix
Twistedmatrix twisted
Twisted
Twisted twisted

Subscriptions

Canonical Ubuntu Linux
Fedoraproject Fedora
Oracle Solaris Zfs Storage Appliance Kit
Redhat Enterprise Linux Satellite Satellite Capsule
Twisted Twisted
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T23:17:39.991Z

Reserved: 2019-05-28T00:00:00.000Z

Link: CVE-2019-12387

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-06-10T12:29:00.287

Modified: 2024-11-25T18:12:24.673

Link: CVE-2019-12387

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-06-10T00:00:00Z

Links: CVE-2019-12387 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses