# CVE-2020-10109: python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability

CVE-2020-10109 is fixed in 15 products on 1 platform, first by python-twisted 17.9.0-2ubuntu0.1, released March 12, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2020-10109
- Priority: High
- CVSS: 9.8 (Medium)
- EPSS: 0.0329
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 12, 2020

## Description

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ol-automation-manager ol 8 | 0:1.0.2-1.el8 | [ELSA-2022-9341](https://patchblox.com/security/data/fix/linux/elsa-2022-9341.md) | Apr 27, 2022 |
| Linux | ol-automation-manager-cli ol 8 | 0:1.0.2-1.el8 | [ELSA-2022-9341](https://patchblox.com/security/data/fix/linux/elsa-2022-9341.md) | Apr 27, 2022 |
| Linux | python-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-bin 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-bin-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-conch Ubuntu 18.04.6 LTS (bionic) | 1:17.9.0-2ubuntu0.1 | [python-twisted-conch 1:17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-conch-1-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-core Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-core 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-core-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-mail Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-mail 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-mail-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-names Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-names 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-names-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-news Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-news 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-news-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-runner Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-runner 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-runner-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-web Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-web 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-web-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python-twisted-words Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python-twisted-words 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-words-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python3-olamkit ol 8 | 0:1.0.2-1.el8 | [ELSA-2022-9341](https://patchblox.com/security/data/fix/linux/elsa-2022-9341.md) | Apr 27, 2022 |
| Linux | python3-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python3-twisted 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |
| Linux | python3-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.1 | [python3-twisted-bin 17.9.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-bin-17.9.0-2ubuntu0.1.md) | Mar 12, 2020 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo