Twisted vulnerabilities

2024-09-0400:00:00

ubuntu.com

twisted

ubuntu

http

html

xss

vulnerabilities

release

packages

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

twisted - Event-based framework for internet applications

Details

It was discovered that Twisted incorrectly handled response order when
processing multiple HTTP requests. A remote attacker could possibly use
this issue to delay and manipulate responses.
This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671)

It was discovered that Twisted did not properly sanitize certain input.
An attacker could use this vulnerability to possibly execute an HTML
injection leading to a cross-site scripting (XSS) attack.
(CVE-2024-41810)

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchpython3-twisted< 24.3.0-1ubuntu0.1UNKNOWN
Ubuntu24.04noarchtwisted-doc< 24.3.0-1ubuntu0.1UNKNOWN
Ubuntu22.04noarchpython3-twisted< 22.1.0-2ubuntu2.5UNKNOWN
Ubuntu22.04noarchtwisted-doc< 22.1.0-2ubuntu2.5UNKNOWN
Ubuntu20.04noarchpython3-twisted< 18.9.0-11ubuntu0.20.04.4UNKNOWN
Ubuntu20.04noarchpython3-twisted-bin< 18.9.0-11ubuntu0.20.04.4UNKNOWN
Ubuntu20.04noarchpython3-twisted-bin-dbg< 18.9.0-11ubuntu0.20.04.4UNKNOWN
Ubuntu20.04noarchtwisted-doc< 18.9.0-11ubuntu0.20.04.4UNKNOWN
Ubuntu18.04noarchpython-twisted< 17.9.0-2ubuntu0.3+esm1UNKNOWN
Ubuntu18.04noarchpython-twisted< 17.9.0-2ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	24.04	noarch	python3-twisted	< 24.3.0-1ubuntu0.1	UNKNOWN
Ubuntu	24.04	noarch	twisted-doc	< 24.3.0-1ubuntu0.1	UNKNOWN
Ubuntu	22.04	noarch	python3-twisted	< 22.1.0-2ubuntu2.5	UNKNOWN
Ubuntu	22.04	noarch	twisted-doc	< 22.1.0-2ubuntu2.5	UNKNOWN
Ubuntu	20.04	noarch	python3-twisted	< 18.9.0-11ubuntu0.20.04.4	UNKNOWN
Ubuntu	20.04	noarch	python3-twisted-bin	< 18.9.0-11ubuntu0.20.04.4	UNKNOWN
Ubuntu	20.04	noarch	python3-twisted-bin-dbg	< 18.9.0-11ubuntu0.20.04.4	UNKNOWN
Ubuntu	20.04	noarch	twisted-doc	< 18.9.0-11ubuntu0.20.04.4	UNKNOWN
Ubuntu	18.04	noarch	python-twisted	< 17.9.0-2ubuntu0.3+esm1	UNKNOWN
Ubuntu	18.04	noarch	python-twisted	< 17.9.0-2ubuntu0.3	UNKNOWN