| Package | Affected versions | Patched versions |
|---|---|---|
| twisted | < 19.2.1 | 19.2.1 |
| zfs storage appliance kit | = 8.8 | |
| twisted | < 19.2.1 | 19.2.1 |
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free