Security Advisory

CVE-2022-21712

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-02-07 00:00:00

Last updated 2025-04-23 19:07:10

Assigner GitHub_M

CVSS score 7.5

State PUBLISHED

Description

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions. Users are advised to upgrade. There are no known workarounds.

← Browse all CVEs View on cve.org ↗