Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in twisted.web #10323

Closed
twisted-trac opened this issue Mar 31, 2022 · 3 comments
Closed

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in twisted.web #10323

twisted-trac opened this issue Mar 31, 2022 · 3 comments
Labels
bug fixed priority-highest web

Comments

@twisted-trac
Copy link

twm's avatar @twm reported
Trac ID trac#10323
Type defect
Created 2022-03-31 06:13:41Z

See GHSA-c2jg-hw38-jrqq for details.

CVE-2022-24801 / GHSA-c2jg-hw38-jrqq

Fixed in Twisted 22.4.0rc1 and later.

Searchable metadata 
trac-id__10323 10323
type__defect defect
reporter__twm twm
priority__highest highest
milestone__None None
branch__ 
branch_author__ 
status__closed closed
resolution__fixed fixed
component__web web
keywords__None None
time__1648707221691948 1648707221691948
changetime__1649745315678394 1649745315678394
version__None None
owner__None None
@twisted-trac
Copy link
Author

twm's avatar @twm commented

Ready for review: https://github.com/twisted/twisted-ghsa-c2jg-hw38-jrqq/pull/1

@twisted-trac
Copy link
Author

twm's avatar @twm set status to closed

@twisted-trac
Copy link
Author

twm's avatar @twm commented

As the PR is no longer accessible, I'll note that this was merged in 592217e

This was referenced May 26, 2022
Closed
Merged
Closed
Closed
Closed
Merged
Merged
Closed
Open
Merged
Open
Closed
Closed
Merged
Closed
This was referenced May 26, 2022
Merged
Closed
Closed
Merged
Merged
Merged
Closed
Merged
Open
Closed
Merged
This was referenced Jan 16, 2023
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
Open
@dependabot dependabot bot mentioned this issue Jan 31, 2023
Closed
@dependabot dependabot bot mentioned this issue May 26, 2022
Merged
This was referenced Jun 2, 2022
Closed
Closed
@dependabot dependabot bot mentioned this issue Apr 22, 2023
Closed
@dependabot dependabot bot mentioned this issue Jul 23, 2023
Closed
@dependabot dependabot bot mentioned this issue May 26, 2022
Closed
@dependabot dependabot bot mentioned this issue Aug 20, 2023
Closed
@dependabot dependabot bot mentioned this issue May 26, 2022
Open
This was referenced Oct 25, 2023
Open
Open
@dependabot dependabot bot mentioned this issue May 26, 2022
Closed
@dependabot dependabot bot mentioned this issue May 26, 2022
Closed
@dependabot dependabot bot mentioned this issue Apr 25, 2022
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug fixed priority-highest web
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@twisted-trac