{"schemaVersion":3,"id":"CVE-2020-10109","aliases":["SUSE-SU-2022:2822-1","GHSA-p5xh-vx83-mxcj","PYSEC-2020-260","UBUNTU-CVE-2020-10109","DEBIAN-CVE-2020-10109"],"status":"published","duplicateOf":null,"title":null,"description":"In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.","dates":{"published":"2020-03-12T12:40:05.000Z","modified":"2024-08-04T10:50:57.900Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"OSV · Pypi","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03289,"percentile":0.88398,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.03289},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03289,"percentile":0.88398}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03289,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.03289,"percentile":0.88398}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_8F60A0AE2F5BA4BF","name":"Exploit Reference (know.bishopfox.com)","source":"reference","url":"https://know.bishopfox.com/advisories","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"18.04","noFixRecorded":false,"fixedIn":null},{"text":"19.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.04 | 16.04 | 18.04 | 19.10","eol":{"isEol":true,"eolDate":"2019-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14.04","label":"14.04 'Trusty Tahr' (LTS)","eolFrom":"2019-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"14.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"twisted","name":"twisted","label":"twisted","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/twisted","purlType":"deb","versions":[{"text":"< 18.9.0-7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.0-7","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"twisted","name":"twisted","label":"twisted","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/twisted","purlType":"deb","versions":[{"text":"< 13.2.0-1ubuntu1.2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 16.0.0-1ubuntu0.4","noFixRecorded":false,"fixedIn":null},{"text":"< 17.9.0-2ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.2.0-1ubuntu1.2+esm1 | < 16.0.0-1ubuntu0.4 | < 17.9.0-2ubuntu0.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"31","noFixRecorded":false,"fixedIn":null},{"text":"32","noFixRecorded":false,"fixedIn":null}],"versionsText":"31 | 32","eol":{"isEol":true,"eolDate":"2020-11-24T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"31","label":"31","eolFrom":"2020-11-24T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"PyPI","product":"twisted","name":"twisted","label":"twisted","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/twisted","purlType":"pypi","versions":[{"text":"< 20.3.0","noFixRecorded":false,"fixedIn":null},{"text":"< 20.3.0rc1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20.3.0 | < 20.3.0rc1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-Twisted&distro=openSUSE Leap 15.3","name":"python-Twisted","label":"python-Twisted&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-Twisted&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-Twisted&distro=openSUSE Leap 15.4","name":"python-Twisted","label":"python-Twisted&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-Twisted&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Enterprise Storage 7","name":"python-Twisted","label":"python-Twisted&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-BCL","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-BCL","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"python-Twisted","label":"python-Twisted&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Manager Proxy 4.1","name":"python-Twisted","label":"python-Twisted&distro=SUSE Manager Proxy 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Manager Proxy 4.1","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Manager Retail Branch Server 4.1","name":"python-Twisted","label":"python-Twisted&distro=SUSE Manager Retail Branch Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Manager Retail Branch Server 4.1","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-Twisted&distro=SUSE Manager Server 4.1","name":"python-Twisted","label":"python-Twisted&distro=SUSE Manager Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-Twisted&distro=SUSE Manager Server 4.1","purlType":"rpm","versions":[{"text":"< 19.10.0-150200.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.10.0-150200.3.15.1","eol":null,"hubHref":null},{"vendor":"twisted","product":"twisted","name":"twisted","label":"twisted","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 19.10.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 19.10.0","eol":null,"hubHref":"/vendor/twisted/twisted"}],"affectedCount":20,"eol":{"hasEol":true,"count":3},"references":[{"url":"https://know.bishopfox.com/advisories","label":"know.bishopfox.com/advisories","hostname":"know.bishopfox.com","tags":["X Refsource MISC","WEB","Advisory","Exploit","Third Party Advisory"]},{"url":"https://know.bishopfox.com/advisories/twisted-version-19.10.0","label":"know.bishopfox.com/advisories/twisted-version-19.10.0","hostname":"know.bishopfox.com","tags":["X Refsource MISC","WEB","Advisory","Release Notes","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3NIL7VXSGJND2Q4BSXM3CFTAFU6T7D/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ISMZFZBWW4EV6ETJGXAYIXN3AT7GBPL/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://usn.ubuntu.com/4308-2/","label":"usn.ubuntu.com/4308-2/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","WEB","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4308-1/","label":"usn.ubuntu.com/4308-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","WEB","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202007-24","label":"security.gentoo.org/glsa/202007-24","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","WEB","Advisory","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00021.html","label":"lists.debian.org/debian-lts-announce/2022/02/msg00021.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","WEB","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222822-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222822-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1166458","label":"bugzilla.suse.com/1166458","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10109","label":"www.suse.com/security/cve/CVE-2020-10109","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10109","label":"nvd.nist.gov/vuln/detail/CVE-2020-10109","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281","label":"github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/advisories/GHSA-p5xh-vx83-mxcj","label":"github.com/advisories/GHSA-p5xh-vx83-mxcj","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2020-260.yaml","label":"github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2020-260.yaml","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/twisted/twisted","label":"github.com/twisted/twisted","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/twisted/twisted/blob/6ff2c40e42416c83203422ff70dfc49d2681c8e2/NEWS.rst#twisted-2030-2020-03-13","label":"github.com/twisted/twisted/blob/6ff2c40e42416c83203422ff70dfc49d2681c8e2/NEWS.rst","hostname":"github.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ISMZFZBWW4EV6ETJGXAYIXN3AT7GBPL","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3NIL7VXSGJND2Q4BSXM3CFTAFU6T7D","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6ISMZFZBWW4EV6ETJGXAYIXN3AT7GBPL","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YW3NIL7VXSGJND2Q4BSXM3CFTAFU6T7D","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://usn.ubuntu.com/4308-1","label":"usn.ubuntu.com/4308-1","hostname":"usn.ubuntu.com","tags":["WEB"]},{"url":"https://usn.ubuntu.com/4308-2","label":"usn.ubuntu.com/4308-2","hostname":"usn.ubuntu.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YW3NIL7VXSGJND2Q4BSXM3CFTAFU6T7D/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6ISMZFZBWW4EV6ETJGXAYIXN3AT7GBPL/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2020-10109","label":"ubuntu.com/security/CVE-2020-10109","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4308-1","label":"ubuntu.com/security/notices/USN-4308-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4308-2","label":"ubuntu.com/security/notices/USN-4308-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10109","label":"www.cve.org/CVERecord?id=CVE-2020-10109","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-10109","label":"security-tracker.debian.org/tracker/CVE-2020-10109","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-2145-1","DLA-2927-1","MGASA-2020-0428","OPENSUSE-SU-2024:11041-1","RHSA-2020:1561","SUSE-SU-2022:2811-1","USN-4308-1","USN-4308-2"],"duplicates":[],"related":["OPENSUSE-SU-2024:11041-1","SUSE-SU-2022:2811-1","USN-4308-1","USN-4308-2"]},"timeline":[{"kind":"published","date":"2020-03-12T12:40:05.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T10:50:57.900Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:52:42.249Z","stale":false,"partial":false}}