Skip to content
OpenAdvisories
Medium USN-3585-1 1 CVE

twisted vulnerability

Published Mar 5, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Twisted incorrectly handled certain HTTP requests.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS twisted 13.2.0-1ubuntu1.2
Ubuntu · 16.04 LTS 16.04:LTS twisted 16.0.0-1ubuntu0.2

Vulnerabilities 1

  • Medium 5.3
    CVE-2016-1000111

    Forced Browsing in Twisted

    Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers…

    twisted twisted twisted py3-twisted Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2016-1000111