~ / search / GHSA-92x2-jw7w-xvvx

GHSA-92x2-jw7w-xvvx

Cookie and header exposure in twisted

Source: GitHub Advisory Database (reviewed) High CVE-2022-21712

Packages

EcosystemPackageAffectedFixed in
PyPI Twisted >= 11.1.0, < 22.1.0 22.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Cookie and Authorization headers are leaked when following cross-origin redirects in `twited.web.client.RedirectAgent` and `twisted.web.client.BrowserLikeRedirectAgent`.

References

External links from the advisory. They lead to third-party sites.