Lucene search
+L

2 matches found

OSV
OSV
added 2023/02/27 8:27 p.m.9 views

MGASA-2023-0061 Updated python-twisted packages fix security vulnerability

When the host header does not match a configured host twisted.web.vhost.NameVirtualHost will return a NoResource resource which renders the Host header unescaped into the 404 response allowing HTML and script injection. CVE-2022-39348...

5.4CVSS5.8AI score0.01156EPSS
SaveExploits1References5
OSV
OSV
added 2020/11/21 12:21 p.m.8 views

MGASA-2020-0428 Updated python-twisted packages fix security vulnerabilities

Jake Miller and ZeddYu Lu discovered that Twisted incorrectly handled certain content-length headers. A remote attacker could possibly use this issue to perform HTTP request splitting attacks CVE-2020-10108, CVE-2020-10109...

9.8CVSS9.4AI score0.03973EPSS
SaveExploits2References7
Rows per page
Query Builder