twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+
CVE-2024-41810 is fixed in 16 products on 1 platform, first by python-twisted 17.9.0-2ubuntu0.3+esm1, released July 29, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| python-Twisted · opensuse-leap 15.6 | 22.10.0-150400.5.23.1 | SUSE-SU-2024:2880-1 | Aug 12, 2024 |
| python-Twisted · sles 15.6 | 22.10.0-150400.5.23.1 | SUSE-SU-2024:2880-1 | Aug 12, 2024 |
| python-twisted · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-bin · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-bin 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-conch · Ubuntu 18.04.6 LTS (bionic) | 1:17.9.0-2ubuntu0.3+esm1 | python-twisted-conch 1:17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-core · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-core 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-mail · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-mail 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-names · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-names 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-news · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-news 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-runner · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-runner 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-web · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-web 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python-twisted-words · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python-twisted-words 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python3-Twisted · sles 15.6 | 22.2.0-150400.21.1 | SUSE-SU-2024:2860-1 | Aug 9, 2024 |
| python3-twisted · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python3-twisted 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python3-twisted · Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.4 | python3-twisted 18.9.0-11ubuntu0.20.04.4 | Jul 29, 2024 |
| python3-twisted · Ubuntu 22.04.1 LTS (jammy) | 22.1.0-2ubuntu2.5 | python3-twisted 22.1.0-2ubuntu2.5 | Jul 29, 2024 |
| python3-twisted · Ubuntu 24.04.5 LTS (noble) | 24.3.0-1ubuntu0.1 | python3-twisted 24.3.0-1ubuntu0.1 | Jul 29, 2024 |
| python3-twisted · amzn 2023 | 22.4.0-127.amzn2023.0.4 | ALAS2023-2024-746 | Oct 24, 2024 |
| python3-twisted+tls · amzn 2023 | 22.4.0-127.amzn2023.0.4 | ALAS2023-2024-746 | Oct 24, 2024 |
| python3-twisted-bin · Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | python3-twisted-bin 17.9.0-2ubuntu0.3+esm1 | Jul 29, 2024 |
| python3-twisted-bin · Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.4 | python3-twisted-bin 18.9.0-11ubuntu0.20.04.4 | Jul 29, 2024 |
| twisted · Debian 12.15 (bookworm) | 22.4.0-4+deb12u1 | DEBIAN-CVE-2024-41810 | Jul 29, 2024 |
| twisted · Debian 13.5 (trixie) | 24.7.0-1 | DEBIAN-CVE-2024-41810 | Jul 29, 2024 |
| twisted · Debian 14 | 24.7.0-1 | DEBIAN-CVE-2024-41810 | Jul 29, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.