What is GHSA-3c45-wgjp-7v9r?

GHSA-3c45-wgjp-7v9r is a security advisory published by GitHub Security Advisories with High severity. Python Twisted trustRoot is not respected in HTTP client

Which CVE IDs does GHSA-3c45-wgjp-7v9r cover?

GHSA-3c45-wgjp-7v9r covers the following CVE IDs: CVE-2014-7143. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3c45-wgjp-7v9r?

GHSA-3c45-wgjp-7v9r has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-3c45-wgjp-7v9r?

GHSA-3c45-wgjp-7v9r affects 1 product, including: pip/twisted:= 14.0.0.

GHSA-3c45-wgjp-7v9rHighCVSS 7.5

Python Twisted trustRoot is not respected in HTTP client

Vendor

GitHub Security Advisories

Published

December 17, 2019

Last Modified

November 25, 2024

🔗 CVE IDs covered (1)

CVE-2014-7143 →

📋 Description

Python Twisted 14.0.0 trustRoot is not respected in HTTP client

🎯 Affected products1

pip/twisted:= 14.0.0

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2014-7143
https://github.com/twisted/twisted/commit/3b5942252f5f3e45862a0e12b266ab29e243cc33
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-7143
https://exchange.xforce.ibmcloud.com/vulnerabilities/96135
https://security-tracker.debian.org/tracker/CVE-2014-7143
http://www.openwall.com/lists/oss-security/2014/09/22/2
https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2019-212.yaml
https://github.com/advisories/GHSA-3c45-wgjp-7v9r