Cross-site scripting in Twisted Web - CVE-2024-41810

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU94851

Cross-site scripting in Twisted Web - CVE-2024-41810

Published: July 30, 2024


Vulnerability identifier: #VU94851
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]
CVE-ID: CVE-2024-41810
CWE-ID: CWE-79
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data in HTTP redirect body within the twisted.web.util.redirectTo function. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.


Affected software

Twisted Web
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
SUSE Linux Enterprise Server 15 SP4 LTSS
Python 3 Module
Server Applications Module
openSUSE Leap
openEuler
python-twisted (Ubuntu package)
python3-twisted (Ubuntu package)
automation-controller (Red Hat package)
python-Twisted-debuginfo
python-Twisted
python-Twisted-debugsource
python3-Twisted-debuginfo
python3-Twisted
python-Twisted-doc
python-twisted
python3-twisted
python-twisted-help
twisted (Debian package)
python311-Twisted-tls
python311-Twisted-conch
python311-Twisted-contextvars
python311-Twisted-serial
python311-Twisted
python311-Twisted-conch_nacl
python311-Twisted-all_non_platform
python311-Twisted-http2
Ansible Automation Platform
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

How to mitigate CVE-2024-41810

Install update from vendor's website.

Twisted Web - update to 24.7.0 rc1
python-twisted (Ubuntu package) - update to Ubuntu Pro
python3-twisted (Ubuntu package) - addressed in versions Ubuntu Pro, 18.9.0-11ubuntu0.20.04.4, 22.1.0-2ubuntu2.5, 24.3.0-1ubuntu0.1
Ansible Automation Platform - update to 2.4
automation-controller (Red Hat package) - addressed in versions 4.5.12-1.el8ap, 4.5.12-1.el9ap
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.1.1
python-Twisted-debuginfo - addressed in versions 15.2.1-9.26.1, 19.10.0-150200.3.24.1
python-Twisted - update to 15.2.1-9.26.1
python-Twisted-debugsource - addressed in versions 15.2.1-9.26.1, 19.10.0-150200.3.24.1
python3-Twisted-debuginfo - update to 19.10.0-150200.3.24.1
python3-Twisted - addressed in versions 19.10.0-150200.3.24.1, 22.2.0-150400.21.1
python-Twisted-doc - update to 22.2.0-150400.21.1
python-twisted - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
python3-twisted - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
python-twisted-help - addressed in versions 22.4.0-3, 22.4.0-4, 22.10.0-4
twisted (Debian package) - update to 22.4.0-4+deb12u1
python311-Twisted-tls - update to 22.10.0-150400.5.23.1
python311-Twisted-conch - update to 22.10.0-150400.5.23.1
python311-Twisted-contextvars - update to 22.10.0-150400.5.23.1
python311-Twisted-serial - update to 22.10.0-150400.5.23.1
python311-Twisted - update to 22.10.0-150400.5.23.1
python311-Twisted-conch_nacl - update to 22.10.0-150400.5.23.1
python311-Twisted-all_non_platform - update to 22.10.0-150400.5.23.1
python311-Twisted-http2 - update to 22.10.0-150400.5.23.1

External References

Related Security Bulletins