Medium ELSA-2020-1091 1 CVE

Moderate: python-twisted-web security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[12.1.0-6]
- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	python-twisted-web	0:12.1.0-6.el7

Vulnerabilities 1

Medium 6.1

CVE-2019-12387

Twisted CRLF Injection

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

twisted twisted twisted py3-twisted Debian Ubuntu Alpine PyPI

Jun 10, 2019