Security Advisory

CVE-2020-10109

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-12 12:40:05
Last updated 2024-08-04 10:50:57
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.