Lucene search
GoogleOSV:PYSEC-2022-27HistoryFeb 07, 2022 - 10:15 p.m.
PYSEC-2022-27
2022-02-0722:15:00
Google
osv.dev
25
twisted
event-driven
networking
cookies
authorization
cross-origin
redirects
upgrade
security issue
web
EPSS
0.004
Percentile
74.8%
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web. BrowserLikeRedirectAgent functions. Users are advised to upgrade. There are no known workarounds.
Related
debiancve
debiancve
CVE-2022-21712
2022-02-07 22:15:08
nessus
nessus
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2022:0734-1)
2022-03-22 00:00:00
SUSE SLES15 Security Update : python-Twisted (SUSE-SU-2022:0499-1)
2022-02-19 00:00:00
RHEL 6 : dev-python_twisted (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
Twisted Web 11.1 < 22.1 Information Disclosure Vulnerability
2022-03-22 00:00:00
openSUSE: Security Advisory for python-Twisted (openSUSE-SU-2022:0499-1)
2022-02-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0734-1)
2022-03-05 00:00:00
cvelist
cvelist
CVE-2022-21712 Cookie and header exposure in twisted
2022-02-07 00:00:00
osv
osv
CVE-2022-21712
2022-02-07 22:15:08
Cookie and header exposure in twisted
2022-02-07 22:36:00
twisted vulnerabilities
2022-03-30 08:17:48
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2022-21712 affecting package python-twisted 20.3.0-4
2022-03-09 18:31:42
veracode
veracode
Information Disclosure
2022-02-08 09:41:27
prion
prion
Design/Logic Flaw
2022-02-07 22:15:00
ubuntucve
ubuntucve
CVE-2022-21712
2022-02-07 00:00:00
redhatcve
redhatcve
CVE-2022-21712
2022-02-08 09:16:30
suse
suse
Security update for python-Twisted (important)
2022-02-18 00:00:00
github
github
Cookie and header exposure in twisted
2022-02-07 22:36:00
Unsafe handling of user-specified cookies in treq
2022-02-01 00:43:38
cve
cve
CVE-2022-21712
2022-02-07 22:15:08
alpinelinux
alpinelinux
CVE-2022-21712
2022-02-07 22:15:08
nvd
nvd
CVE-2022-21712
2022-02-07 22:15:08
redhat
redhat
ubuntu
ubuntu
Twisted vulnerabilities
2022-03-30 00:00:00
mageia
mageia
Updated python-twisted packages fix security vulnerability
2022-05-12 13:24:45
gentoo
gentoo
Twisted: Multiple Vulnerabilities
2023-01-11 00:00:00
debian
debian
[SECURITY] [DLA 2927-1] twisted security update
2022-02-19 16:30:59
fedora
fedora
[SECURITY] Fedora 36 Update: python-twisted-22.4.0-1.fc36
2022-07-03 01:07:05
[SECURITY] Fedora 35 Update: python-twisted-22.4.0-1.fc35
2022-07-03 01:21:11