{"id":"CVE-2019-12855","details":"In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.","aliases":["GHSA-65rm-h285-5cc5","PYSEC-2019-129"],"modified":"2026-05-18T15:10:13.423451Z","published":"2019-06-16T12:29:00.227Z","related":["SUSE-SU-2019:2212-1","SUSE-SU-2019:2453-1","openSUSE-SU-2019:2068-1","openSUSE-SU-2019:2110-1","openSUSE-SU-2024:11212-1"],"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00013.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00028.html"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLTZDMFBNFSJMBXYJNGJHENJA4H2TSMZ/"},{"type":"WEB","url":"https://usn.ubuntu.com/4308-1/"},{"type":"WEB","url":"https://usn.ubuntu.com/4308-2/"},{"type":"WEB","url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"type":"ADVISORY","url":"https://twistedmatrix.com/trac/ticket/9561"},{"type":"FIX","url":"https://github.com/twisted/twisted/pull/1147"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/twisted/twisted","events":[{"introduced":"0"},{"last_affected":"c0776850e756adfcdc179a7fd9e4c8f5cbc4838d"}],"database_specific":{"cpe":"cpe:2.3:a:twisted:twisted:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"19.2.1"}],"source":"CPE_FIELD"}}],"versions":["twisted-19.2.1","twisted-19.2.0","before-black"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12855.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}