Most recent entries from all

Withdrawn: BELL-CVE-2016-1000111 — CVE-2016-1000111 does not affect BellSoft software

Withdrawn by the publisher.

BREW-alot-CVE-2016-1000111 — Forced Browsing in Twisted

Affected: Homebrew: alot

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the `HTTP_PROXY` environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an `httpoxy` issue.

cnvd-2016-05252

EUVD-2026-88936

fkie_cve-2016-1000111

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

GHSA-3gqj-cmxr-p4x2 — Forced Browsing in Twisted

Affected: PyPI: Twisted

gsd-2016-1000111

openSUSE-SU-2024:10162-1 — python3-Twisted-16.4.1-1.2 on GA media

python3-Twisted-16.4.1-1.2 on GA media

PYSEC-2020-214

Affected: PyPI: twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

RHSA-2018:0273 — Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update

Twisted: sets environmental variable based on user supplied Proxy request header

SUSE-SU-2017:0114-1 — Security update for python-Twisted

Security update for python-Twisted

UBUNTU-CVE-2016-1000111

Affected: Ubuntu:14.04:LTS: twisted, Ubuntu:16.04:LTS: twisted

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

WID-SEC-W-2025-2522 — Mehrere Webserver: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in mehreren Webserver Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.