Homepage

Cross-site Scripting (XSS) The advisory has been revoked - it doesn't affect any version of package python-twisted.src  (opens in a new tab)

Threat Intelligence

Exploit Maturity
Proof of Concept
EPSS
67.84% (99th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-PYTHONTWISTEDSRC-12614495
  • published11 Sept 2025
  • disclosed29 Jul 2024
Report a new vulnerability Found a mistake?

Introduced: 29 Jul 2024

CVE-2024-41810  (opens in a new tab)
CWE-79  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream python-twisted.src package and not the python-twisted.src package as distributed by RHEL.

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting (XSS) in the redirect response HTML body. This vulnerability is fixed in 24.7.0rc1.