Published: 25/10/2023 Updated: 02/11/2023

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 0

Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
twistedmatrix twisted

Synopsis Moderate: Red Hat Ansible Automation Platform 24 Product Security and Bug Fix Update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat Ansible Automation Platform 24Red Hat P ...

Debian Bug report logs - #1054913 twisted: CVE-2023-46137: Disordered HTTP pipeline response in twistedweb Package: src:twisted; Maintainer for src:twisted is Debian Python Team <team+python@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 28 Oct 2023 14:51:01 UTC Severity: impor ...

Technology preview that show-cases Instana's tracing for Envoy

Instana Envoy Tracing Demo This repository contains a technology preview for Instana's Envoy tracing functionality Supported Versions The distributed tracing is compatible with Envoy Proxy versions 115 and above Prerequisites A docker-compose installation running on your machine This demo has been created and tested on Mac OS and RHEL with docker-compose and docker-mac

Instana tracing for NGINX demonstration

Instana NGINX Tracing Demo This repository contains a demo for Instana's NGINX tracing functionality Prerequisites A docker-compose installation running on your machine This demo has been created and tested on Mac OS X with docker-compose and docker-machine Configure Create a env file in the root of the checked-out version of this repository and enter the following tex

CWE-444 https://github.com/twisted/twisted/security/advisories/GHSA-xc8x-vp79-p3wm https://access.redhat.com/errata/RHSA-2024:0322 https://nvd.nist.gov https://github.com/instana/envoy-tracing

CVE-2023-46137

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect