CVE-2019-12387 - CVE House
Back to Database
Status published Medium CVE-2019-12387

In Twisted before 19.2.1, twisted.web did not validate or sanitize...

Vulnerability Description

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12387

Credits & Attribution

No credits recorded in the NVD database.

References

More from twisted

View All →
CVE-2024-41810
HTML injection in HTTP redirect body
Medium 6.1
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
High 8.3
CVE-2023-46137
twisted.web has disordered HTTP pipeline response
Medium 5.3
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
Medium 5.4
CVE-2022-24801
HTTP Request Smuggling in twisted.web
High 8.1

Affected Vendor

Affected Software

twisted, fedora, ubuntu linux, zfs storage appliance kit, solaris
Vulnerable Versions:
0, 29, 14.04, 16.04, 18.04, 19.10, 8.8, 11

Timeline

Official Publish: June 10th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.