CBL Mariner 2.0 Security Update: python-twisted (CVE-2024-41810)

The version of python-twisted installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41810 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. The...

CBL Mariner 2.0 Security Update: python-twisted (CVE-2024-41671)

The version of python-twisted installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41671 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0...

CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3. A patched version of the package is available...

CVE-2024-41810 affecting package python-twisted for versions less than 22.10.0-3

CVE-2024-41810 affecting package python-twisted for versions less than 22.10.0-3. A patched version of the package is available...

CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3. A patched version of the package is available...

CVE-2024-41810 affecting package python-twisted for versions less than 22.10.0-3

CVE-2024-41810 affecting package python-twisted for versions less than 22.10.0-3. A patched version of the package is available...

SUSE: Security Advisory (SUSE-SU-2024:2880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: python311-Twisted / python311-Twisted-all_non_platform / etc (SUSE-SU-2024:2880-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2880-1 advisory. - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order...

SUSE-SU-2024:2880-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response bsc1228552...

SUSE: Security Advisory (SUSE-SU-2024:2757-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : python-Twisted (SUSE-SU-2024:2757-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2757-1 advisory. - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed...

SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2024:2732-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2732-1 advisory. - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed...

SUSE-SU-2024:2757-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response bsc1228552...

AZL-47073 CVE-2024-41810 affecting package python-twisted for versions less than 22.10.0-3

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site...

AZL-47101 CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

AZL-47151 CVE-2024-41671 affecting package python-twisted for versions less than 22.10.0-3

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

RHEL 6 : python-twisted (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods CVE-2019-12387 Note that Nessus...

RHEL 7 : python-twisted (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-twisted: XMPP support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing f...

RHEL 8 : python-twisted (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dev-python/twisted: secret exposure in cross-origin redirects CVE-2022-21712 - Twisted is an event-based...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:0322)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0322 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...