Skip to content
OpenAdvisories
High USN-5576-1 1 CVE

twisted vulnerability

Published Aug 24, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Twisted incorrectly parsed some types of HTTP requests
in its web server implementation. In certain proxy or multi-server
configurations, a remote attacker could craft malicious HTTP requests in order
to obtain sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS twisted 22.1.0-2ubuntu2.3

Vulnerabilities 1

  • High 8.1
    CVE-2022-24801

    HTTP Request Smuggling in twisted.web

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the Twisted Web HTTP 1.1 server, located in the `twisted.web.http` module, parsed several HTTP request constructs more leniently than permitted …

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-24801