Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-tec3-uqmg-tueq
Vulnerability ID VCID-tec3-uqmg-tueq
Aliases CVE-2022-39348
GHSA-vg46-2rrj-3647
Summary Multiple vulnerabilities have been discovered in Twisted, the worst of which could result in denial of service.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 5.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-39348.json
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01138 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01178 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01178 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2022-39348
cvssv3.1 3.7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-vg46-2rrj-3647
cvssv3.1 5.4 https://github.com/twisted/twisted
cvssv4 5.1 https://github.com/twisted/twisted
generic_textual MODERATE https://github.com/twisted/twisted
cvssv3.1 5.4 https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
cvssv4 5.1 https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
generic_textual MODERATE https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
ssvc Track https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
cvssv3.1 5.4 https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
cvssv4 5.1 https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
generic_textual MODERATE https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
ssvc Track https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
cvssv3.1 5.4 https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
cvssv3.1_qr MODERATE https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
cvssv4 5.1 https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
generic_textual MODERATE https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
ssvc Track https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
cvssv3.1 5.4 https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
cvssv4 5.1 https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
generic_textual MODERATE https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
ssvc Track https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
cvssv3.1 5.4 https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
cvssv4 5.1 https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
generic_textual MODERATE https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
cvssv3.1 5.4 https://nvd.nist.gov/vuln/detail/CVE-2022-39348
cvssv4 5.1 https://nvd.nist.gov/vuln/detail/CVE-2022-39348
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-39348
cvssv3.1 5.4 https://security.gentoo.org/glsa/202301-02
cvssv4 5.1 https://security.gentoo.org/glsa/202301-02
generic_textual MODERATE https://security.gentoo.org/glsa/202301-02
ssvc Track https://security.gentoo.org/glsa/202301-02
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-39348.json
https://api.first.org/data/v1/epss?cve=CVE-2022-39348
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39348
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/twisted/twisted
https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
https://nvd.nist.gov/vuln/detail/CVE-2022-39348
https://security.gentoo.org/glsa/202301-02
1023359 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023359
2139431 https://bugzilla.redhat.com/show_bug.cgi?id=2139431
GHSA-vg46-2rrj-3647 https://github.com/advisories/GHSA-vg46-2rrj-3647
USN-6575-1 https://usn.ubuntu.com/6575-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-39348.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/twisted/twisted
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://github.com/twisted/twisted
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:43:19Z/ Found at https://github.com/twisted/twisted/commit/f2f5e81c03f14e253e85fe457e646130780db40b
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:43:19Z/ Found at https://github.com/twisted/twisted/commit/f49041bb67792506d85aeda9cf6157e92f8048f4
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:43:19Z/ Found at https://github.com/twisted/twisted/security/advisories/GHSA-vg46-2rrj-3647
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:43:19Z/ Found at https://lists.debian.org/debian-lts-announce/2022/11/msg00038.html
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-39348
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-39348
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://security.gentoo.org/glsa/202301-02
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Found at https://security.gentoo.org/glsa/202301-02
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:43:19Z/ Found at https://security.gentoo.org/glsa/202301-02
Exploit Prediction Scoring System (EPSS)
Percentile 0.78359
EPSS Score 0.01138
Published At April 7, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:00:53.756374+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202301-02 38.0.0