# CVE-2024-41810: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+ CVE-2024-41810 is fixed in 16 products on 1 platform, first by python-twisted 17.9.0-2ubuntu0.3+esm1, released July 29, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-41810 - Priority: Routine - CVSS: 6.1 (medium) - EPSS: 0.0120 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 29, 2024 ## Description Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | python-Twisted opensuse-leap 15.6 | 22.10.0-150400.5.23.1 | [SUSE-SU-2024:2880-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2880-1.md) | Aug 12, 2024 | | Linux | python-Twisted sles 15.6 | 22.10.0-150400.5.23.1 | [SUSE-SU-2024:2880-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2880-1.md) | Aug 12, 2024 | | Linux | python-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-bin 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-bin-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-conch Ubuntu 18.04.6 LTS (bionic) | 1:17.9.0-2ubuntu0.3+esm1 | [python-twisted-conch 1:17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-conch-1-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-core Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-core 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-core-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-mail Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-mail 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-mail-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-names Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-names 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-names-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-news Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-news 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-news-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-runner Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-runner 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-runner-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-web Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-web 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-web-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python-twisted-words Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python-twisted-words 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-twisted-words-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python3-Twisted sles 15.6 | 22.2.0-150400.21.1 | [SUSE-SU-2024:2860-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2860-1.md) | Aug 9, 2024 | | Linux | python3-twisted Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python3-twisted 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.4 | [python3-twisted 18.9.0-11ubuntu0.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-twisted-18.9.0-11ubuntu0.20.04.4.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 22.04.1 LTS (jammy) | 22.1.0-2ubuntu2.5 | [python3-twisted 22.1.0-2ubuntu2.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-twisted-22.1.0-2ubuntu2.5.md) | Jul 29, 2024 | | Linux | python3-twisted Ubuntu 24.04.5 LTS (noble) | 24.3.0-1ubuntu0.1 | [python3-twisted 24.3.0-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3-twisted-24.3.0-1ubuntu0.1.md) | Jul 29, 2024 | | Linux | python3-twisted amzn 2023 | 22.4.0-127.amzn2023.0.4 | [ALAS2023-2024-746](https://patchblox.com/security/data/fix/linux/alas2023-2024-746.md) | Oct 24, 2024 | | Linux | python3-twisted+tls amzn 2023 | 22.4.0-127.amzn2023.0.4 | [ALAS2023-2024-746](https://patchblox.com/security/data/fix/linux/alas2023-2024-746.md) | Oct 24, 2024 | | Linux | python3-twisted-bin Ubuntu 18.04.6 LTS (bionic) | 17.9.0-2ubuntu0.3+esm1 | [python3-twisted-bin 17.9.0-2ubuntu0.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-twisted-bin-17.9.0-2ubuntu0.3-esm1.md) | Jul 29, 2024 | | Linux | python3-twisted-bin Ubuntu 20.04 LTS (focal) | 18.9.0-11ubuntu0.20.04.4 | [python3-twisted-bin 18.9.0-11ubuntu0.20.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-twisted-bin-18.9.0-11ubuntu0.20.04.4.md) | Jul 29, 2024 | | Linux | twisted Debian 12.15 (bookworm) | 22.4.0-4+deb12u1 | [DEBIAN-CVE-2024-41810](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41810.md) | Jul 29, 2024 | | Linux | twisted Debian 13.5 (trixie) | 24.7.0-1 | [DEBIAN-CVE-2024-41810](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41810.md) | Jul 29, 2024 | | Linux | twisted Debian 14 | 24.7.0-1 | [DEBIAN-CVE-2024-41810](https://patchblox.com/security/data/fix/linux/debian-cve-2024-41810.md) | Jul 29, 2024 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.