Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Twisted Version 19.10.0

bishopfox.com | blog | #request-smuggling | #python | #advisory | #http | #twisted

Summary

A Bishop Fox advisory: two HTTP request splitting (smuggling) flaws in Twisted Web 19.10.0 can cause cache poisoning, session hijacking, and filter bypasses; upgrade to 20.3.0rc1.
Published
Collected

original ↗

Related coverage

  1. Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling (portswigger.net)
  2. Making desync attacks easy with TRACE (portswigger.net)
  3. h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c) (bishopfox.com)
  4. ConnectWise Control 19.3.25270.7185 - Eight Vulnerabilities, Including Critical (bishopfox.com)
  5. Big Monitoring Fabric Application (bishopfox.com)
  6. Solismed Version 3.3SP1 (bishopfox.com)

back