CVE-2024-41810
EUVD-2024-016729.07.2024, 16:15
Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| twisted | twisted | 𝑥 ≤ 24.3.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| twistedmatrix | twisted | 𝑥 ≤ 24.3.0 | ADP |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python3-Twisted |
| ||||||||||||||||||||||
| python311-Twisted |
| ||||||||||||||||||||||
| python311-Twisted-all_non_platform |
| ||||||||||||||||||||||
| python311-Twisted-conch |
| ||||||||||||||||||||||
| python311-Twisted-conch_nacl |
| ||||||||||||||||||||||
| python311-Twisted-contextvars |
| ||||||||||||||||||||||
| python311-Twisted-http2 |
| ||||||||||||||||||||||
| python311-Twisted-serial |
| ||||||||||||||||||||||
| python311-Twisted-tls |
|
References