CVE-2019-12387

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF

published June 10, 2019

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02523 · 84.7th percentile
Published
2019-06-10T11:34Z
EPSS history
Timeline
  • 10 JUN 11:34Z
    In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF
    cvelistv5