Red Hat Security AdvisoryRHSA-2020:1091
python-twisted-web security update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) python-twisted-web-12.1.0-6.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-twisted-web-12.1.0-6.el7
- Red Hat Enterprise Linux Server Optional (v. 7) python-twisted-web-12.1.0-6.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) python-twisted-web-12.1.0-6.el7
Fixes 1 record
Priority LOW 32
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02523 · Published 2019-06-10 · Partial fix · 19.2.1 CWE-74
