Vulnerability	Vulnerable Version
M HTTP Response Smuggling Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to HTTP Response Smuggling. When sending multiple HTTP/1.1 requests in one TCP segment, twisted.web does not guarantee the response order. An attacker in control of an endpoint can manipulate a different user's second response to a pipelined chunked request by delaying the response to their own request. Information disclosure across sessions may also be possible for reverse proxy servers using pooled connections. How to fix HTTP Response Smuggling? Upgrade `Twisted` to version 24.7.0rc1 or higher.	[16.3.0,24.7.0rc1)
M Cross-site Scripting (XSS) Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when the victim is using Firefox, due to an unescaped URL in the `redirectTo()` function. A site which is vulnerable to open redirects by other means can be can be made to execute scripts injected into a redirect URL. How to fix Cross-site Scripting (XSS)? Upgrade `Twisted` to version 24.7.0rc1 or higher.	[,24.7.0rc1)
M HTTP Response Smuggling Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to HTTP Response Smuggling. When sending multiple HTTP/1.1 requests in one TCP segment, twisted.web does not guarantee the response order. An attacker in control of an endpoint can manipulate a different user's second response to a pipelined chunked request by delaying the response to their own request. How to fix HTTP Response Smuggling? Upgrade `Twisted` to version 23.10.0rc1 or higher.	[16.3.0,23.10.0rc1)

Go back to all versions of this package