CVE-2023-46137

🗓️ 26 Oct 2023 15:59:37Reported by redhat.comType

Twisted framework allows asynchronous HTTP requests processing and may be vulnerable to response manipulation prior to version 23.10.0rc1

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Twisted [ CVE-2023-46137]	31 Jan 202423:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability Werkzeug, Twisted-22.10.0-py3, requests-2.32.2-py3, commons-lang-2.6, commons-fileupload-1.5, urllib3-2.2.2, jetty-server-9.4.56.v20240826 affect IBM Cloud Object Storage Systems (Oct 2025)	24 Oct 202515:45	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-twisted, python3-twisted+tls (ALAS2023-2023-432)	15 Nov 202300:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: python-twisted (CVE-2023-46137)	28 Mar 202500:00	–	nessus
Tenable Nessus	Debian dla-3970 : python3-twisted - security update	28 Nov 202400:00	–	nessus
Tenable Nessus	Debian dsa-5797 : python3-twisted - security update	25 Oct 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: python-twisted (CVE-2023-46137)	14 Feb 202500:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:0322)	29 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-twisted) (RHSA-2024:1516)	26 Mar 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenStack Platform 16.2.6 (python-twisted) (RHSA-2024:1518)	26 Mar 202400:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46137
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

17 Nov 2024 12:10Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.3

EPSS0.00609