View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2020-10108 severity important: SUSE including 4 source package names (matrix-synapse-1.43.0-1.1, python-Twisted, python-Twisted-15.2.1-9.23.1, python-twisted-web-12.1.0-7.el7_8), 9 product×package rows across 9 product lines (HPE Helion OpenStack 8, SUSE Liberty Linux 7, … (9 product lines)): Fixed 8, Known Not Affected 1.
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request.