Web Server
Tornado
Tornado is a Python web framework and asynchronous networking library originally developed at FriendFeed. By using non-blocking network I/O Tornado can scale to tens of thousands of open connections making it ideal for long polling WebSockets and other applications that require a long-lived connection to each user.
Severity Summary:
High: 1
Medium: 3
Tornado Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability
High
Tornado Observable Differences in Behavior to Error Inputs Vulnerability
Medium
Tornado Improper Input Validation Vulnerability
Medium
Tornado URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium