Skip to content
OpenAdvisories
Medium RHSA-2016:1978 1 CVE

Red Hat Security Advisory: python-twisted-web security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client python-twisted-web 0:8.2.0-5.el6_8
Red Hat · RHEL 6 enterprise_linux:6::server python-twisted-web 0:8.2.0-5.el6_8
Red Hat · RHEL 6 enterprise_linux:6::workstation python-twisted-web 0:8.2.0-5.el6_8
Red Hat · RHEL 7 enterprise_linux:7::client python-twisted-web 0:12.1.0-5.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server python-twisted-web 0:12.1.0-5.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation python-twisted-web 0:12.1.0-5.el7_2

Vulnerabilities 1

  • Medium 5.3
    CVE-2016-1000111

    Forced Browsing in Twisted

    Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers…

    twisted twisted twisted py3-twisted Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1357345
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1978.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-1000111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-1000111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-1000111