GitHub Advisoryadvisory · PyPI

GHSA-3c45-wgjp-7v9r Python Twisted trustRoot is not respected in HTTP client

HIGH Published 2019-12-17 Modified 2024-11-25 Official page ↗
Aliases
CVE-2014-7143
Ecosystem
PyPI
Packages
Twisted
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-295
Reviewed
2019-12-17

Affected packages

• PyPI Twisted: >= 14.0.0, < 14.0.1 → fixed in 14.0.1

Description

Python Twisted 14.0.0 `trustRoot` is not respected in HTTP client

Related

Alias · CVE (1)

  • CVE-2014-7143 Python Twisted 14.0 trustRoot is not respected in HTTP client vulnerability

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References