CVE-2022-21712
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-21712
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-21712.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-21712
- Aliases
- Related
- Published
- 2022-02-07T22:15:08Z
- Modified
- 2024-09-18T03:20:21.273602Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the
twited.web.RedirectAgentandtwisted.web. BrowserLikeRedirectAgentfunctions. Users are advised to upgrade. There are no known workarounds. - References
-
- https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx
- https://security.gentoo.org/glsa/202301-02
- https://lists.debian.org/debian-lts-announce/2022/02/msg00021.html
- https://github.com/twisted/twisted/commit/af8fe78542a6f2bf2235ccee8158d9c88d31e8e2
- https://github.com/twisted/twisted/releases/tag/twisted-22.1.0
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7U6KYDTOLPICAVSR34G2WRYLFBD2YW5K/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLKHA6WREIVAMBQD7KKWYHPHGGNKMAG6/
- https://security-tracker.debian.org/tracker/CVE-2022-21712
Affected packages
Debian:11 / twisted
Package
- Name
- twisted
- Purl
- pkg:deb/debian/twisted?arch=source
Debian:12 / twisted
Package
- Name
- twisted
- Purl
- pkg:deb/debian/twisted?arch=source
Debian:13 / twisted
Package
- Name
- twisted
- Purl
- pkg:deb/debian/twisted?arch=source
Git / github.com/twisted/twisted
Affected ranges
- Type
- GIT
- Repo
- https://github.com/twisted/twisted
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
before-black
twisted-16.*
twisted-16.2.0
twisted-16.3.0
twisted-16.4.0
twisted-16.4.1
twisted-16.5.0
twisted-16.6.0
twisted-17.*
twisted-17.1.0
twisted-17.5.0
twisted-17.9.0
twisted-18.*
twisted-18.4.0
twisted-18.7.0
twisted-18.9.0
twisted-19.*
twisted-19.2.0
twisted-19.7.0
twisted-20.*
twisted-20.11.0.dev6
twisted-21.*
twisted-21.2.0
twisted-21.2.0rc1
twisted-21.7.0
twisted-21.7.0rc1
twisted-21.7.0rc2
twisted-21.7.0rc3