Lucene search
GitHub_MCVELIST:CVE-2023-46137HistoryOct 25, 2023 - 8:56 p.m.
CVE-2023-46137 twisted.web has disordered HTTP pipeline response
2023-10-2520:56:27
CWE-444
GitHub_M
raw.githubusercontent.com
4
twisted framework
http pipeline
vulnerability
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.
Related
nessus
nessus
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2023:4608-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for python (SUSE-SU-2023:4490-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for python3 (SUSE-SU-2023:4607-1)
2024-03-04 00:00:00
ibm
ibm
github
github
twisted.web has disordered HTTP pipeline response
2023-10-25 21:15:13
osv
osv
twisted.web has disordered HTTP pipeline response
2023-10-25 21:15:13
CVE-2023-46137
2023-10-25 21:15:10
PYSEC-2023-224
2023-10-25 21:15:00
redhat
redhat
debiancve
debiancve
CVE-2023-46137
2023-10-25 21:15:10
prion
prion
Design/Logic Flaw
2023-10-25 21:15:00
redhatcve
redhatcve
CVE-2023-46137
2023-10-26 15:59:37
veracode
veracode
HTTP Request Smuggling
2023-10-26 07:40:15
ubuntucve
ubuntucve
CVE-2023-46137
2023-10-25 00:00:00
cve
cve
CVE-2023-46137
2023-10-25 21:15:10
ubuntu
ubuntu
Twisted vulnerabilities
2024-01-10 00:00:00