CVE-2022-21712

Name of the Vulnerable Software and Affected Versions Twisted (affected versions not specified)

Description The issue is related to the exposure of cookies and authorization headers when following cross-origin redirects. This problem is present in the twisted.web.RedirectAgent and twisted.web.BrowserLikeRedirectAgent functions. The vulnerability allows a remote attacker to access confidential data.

Recommendations As a temporary workaround, consider disabling the twisted.web.RedirectAgent and twisted.web.BrowserLikeRedirectAgent functions until a patch is available. Users are advised to upgrade to a newer version to resolve the issue. At the moment, there is no information about a specific newer version that contains a fix for this vulnerability.