CVEs-PoC/2022/CVE-2022-21712.md

CVE-2022-21712

Description

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the twited.web.RedirectAgent and twisted.web. BrowserLikeRedirectAgent functions. Users are advised to upgrade. There are no known workarounds.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon