admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-41810.md
0xMarcio 70ad145994 Update CVE sources 2024-08-09 18:54
2024-08-09 18:54:21 +00:00

1.2 KiB
Raw Blame History

CVE-2024-41810

Description

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.

POC

Reference

Github

No PoCs found on GitHub currently.