Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

Summary An incomplete header-value validation CWE-444 in the Twisted HTTP server lets a bare carriage return or line feed in a header value hide a following header from the parser. twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in a header value but not a bare CR or LF, even thoug...

GHSA-Q7QQ-6MHP-9RC4 Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

Summary An incomplete header-value validation CWE-444 in the Twisted HTTP server lets a bare carriage return or line feed in a header value hide a following header from the parser. twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in a header value but not a bare CR or LF, even thoug...