Description

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

Remediation

References

CVE-2019-12387

Related Vulnerabilities

WordPress Plugin CM Ad Changer Cross-Site Scripting (1.7.7)

WordPress Plugin Two Way CHAT-Send or receive messages to your user Multiple Vulnerabilities (3.1.4)

MediaWiki Improper Input Validation Vulnerability (CVE-2014-5243)

WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.5.0)

WordPress Plugin TextMe SMS Cross-Site Scripting (1.8.8)

Severity

Medium

Classification

CVE-2019-12387 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities