twisted - CVE CyberSecurity Database News

CVE-2022-39348: Twisted Host Header Injection Vulnerability in NameVirtualHost Resource

Oct 26, 2022 XSS Exploit twisted

CVE-2022-39348: Twisted Host Header Injection Vulnerability in NameVirtualHost Resource

The CVE-2022-39348 refers to a Cross-Site Scripting (XSS) vulnerability discovered in the twisted.web.vhost.NameVirtualHost implementation provided by the Twisted framework. The issue results