CVE-2019-12387
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
- Update to 18.9.0-7
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for twisted in the last 30 days: 7. Listed in the KEV catalogue: 0.
Vulnerabilities: 21
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
Check your installed stack and versions against the current vulnerability feeds.