tornado vulnerabilities (Root)
14 vulnerabilities.
-
tornadoRoot Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient 8.7 High -
tornadoRoot Tornado before 6.5.9 Denial of Service via Query String 6.9 Medium -
tornadoRoot Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 7.5 High -
tornadoRoot Tornado before 6.5.7 Credential Leak via Handle Reuse 8.2 High -
tornadoRoot tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 7.5 High -
tornadoRoot Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient 7.7 High -
tornadoRoot Tornado has incomplete validation of cookie attributes 7.2 High -
tornadoRoot Tornado has a DoS due to too many multipart parts 8.7 High -
tornadoRoot Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
tornadoRoot Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
tornadoRoot Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient 6.3 Medium -
tornadoRoot Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding 9.0 Critical -
tornadoRoot Tornado before 6.3.3 HTTP Request Smuggling via Content-Length 9.0 Critical -
tornadoRoot Open redirect in Tornado 6.1 Medium