CVE:CVE-2022-21712
CNNVD:CNNVD-202202-545
Twisted是一款使用Python语言编写的事件驱动的开源网络引擎。
Twisted 中存在信息泄露漏洞，该漏洞源于在跨源重定向时会暴露Cookie和授权信息。
solution:Upgrade twistedmatrix twisted to a higher version than 22.1.0,and avoid the version [11.1.0,22.1.0); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36