CVE-2020-10108
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.0%
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request.
Produtos afetados
n/a · n/aReferências
https://know.bishopfox.com/advisorieshttps://know.bishopfox.com/advisories/twisted-version-19.10.0https://lists.debian.org/debian-lts-announce/2022/02/msg00021.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ISMZFZBWW4EV6ETJGXAYIXN3AT7GBPL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3NIL7VXSGJND2Q4BSXM3CFTAFU6T7D/https://security.gentoo.org/glsa/202007-24https://usn.ubuntu.com/4308-1/https://usn.ubuntu.com/4308-2/https://www.oracle.com/security-alerts/cpuoct2020.html