Published: 07/02/2022 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

It has been discovered that twisted before 22.1 exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
twistedmatrix twisted
debian debian linux 9.0
fedoraproject fedora 35
fedoraproject fedora 36

Several security issues were fixed in Twisted ...

Synopsis Important: Red Hat OpenStack Platform 161 (python-twisted) security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-twisted is now available for Red Hat OpenStackPlatform 161 (Train) ...

Synopsis Important: Red Hat OpenStack Platform 162 (python-twisted) security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-twisted is now available for Red Hat OpenStackPlatform 162 (Train) ...

It has been discovered that twisted prior to 221 exposes cookies and authorization headers when following cross-origin redirects This issue is present in the `twitedwebRedirectAgent` and `twistedweb BrowserLikeRedirectAgent` functions ...

ALAS-2022-231 Amazon Linux 2022 Security Advisory: ALAS-2022-231 Advisory Release Date: 2022-12-06 16:42 Pacific ...

CWE-200 https://github.com/twisted/twisted/commit/af8fe78542a6f2bf2235ccee8158d9c88d31e8e2 https://github.com/twisted/twisted/releases/tag/twisted-22.1.0 https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx https://lists.debian.org/debian-lts-announce/2022/02/msg00021.html https://security.gentoo.org/glsa/202301-02 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLKHA6WREIVAMBQD7KKWYHPHGGNKMAG6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7U6KYDTOLPICAVSR34G2WRYLFBD2YW5K/https://ubuntu.com/security/notices/USN-5354-1 https://nvd.nist.gov https://security.archlinux.org/CVE-2022-21712

CVE-2022-21712

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect