CVE-2022-21712
Cookie and header exposure in twisted
Résumé
Cookie and header exposure in twisted
Description d'origine
La description telle que publiée par la source (souvent en anglais).
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web. BrowserLikeRedirectAgent functions. Users are advised to upgrade. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-21712 twisted Corrigé dans: 20.3.0-7+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.gentoo.org
- patch github.com
- web github.com
- web lists.debian.org