by @Smartkeyss
13 Sep 2024

Disordered HTTP pipeline in twisted.web (CVE-2024-41671)

by @Smartkeyss
13 Sep 2024

Disordered HTTP pipeline in twisted.web (CVE-2024-41671)

CVEs

8.3 High Severity

Screenshots from the blog posts

images/cm0vu90uo90gj1gofglle47i8.pngimages/cm0vu90uo90gj1gofglle47i8.png

Summary

Twisted, an event-based framework for internet apps (Python 3.6+), had a vulnerability in its HTTP 1.0/1.1 server, where pipelined requests could be processed out-of-order, potentially leading to information disclosure. This issue is resolved in version 24.7.0rc1.

Description

users/photos/clsevlral8gef1hon15grbvup.jpg

@Smartkeyss

63 posts

I am just curious 😊 I use simple words to explain complicated things. discord: @rxs_s

Total vcoins

0

Social media links

Comments (0)