Tornado is a Python web framework and asynchronous networking library originally developed at FriendFeed. By using non-blocking network I/O Tornado can scale to tens of thousands of open connections making it ideal for long polling WebSockets and other applications that require a long-lived connection to each user.
Tornado Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability
High
Tornado Allocation of Resources Without Limits or Throttling Vulnerability
High
Tornado Uncontrolled Resource Consumption Vulnerability
High
Tornado Uncontrolled Resource Consumption Vulnerability
High
Tornado Allocation of Resources Without Limits or Throttling Vulnerability
High
Tornado Uncontrolled Resource Consumption Vulnerability
High
TornadoWebServer : Uncontrolled Resource Consumption Vulnerability
High
TornadoWebServer Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) V
High
TornadoWebServer Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) V
High
TornadoWebServer Allocation of Resources Without Limits or Throttling Vulnerability
High
TornadoWebServer Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability
High
Tornado Observable Differences in Behavior to Error Inputs Vulnerability
Medium
Tornado Improper Input Validation Vulnerability
Medium
Tornado URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
Tornado Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
Tornado Improper Handling of Invalid Use of Special Elements Vulnerability
Medium
TornadoWebServer Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response
Medium
TornadoWebServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
TornadoWebServer Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response
Medium
TornadoWebServer Improper Link Resolution Before File Access (Link Following) Vulnerability
Medium
TornadoWebServer Allocation of Resources Without Limits or Throttling Vulnerability
Medium