CVE-2023-24329
EUVD-2023-2838517.02.2023, 15:15
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | python | 𝑥 < 3.7.17 |
| python | python | 3.8.0 ≤ 𝑥 < 3.8.17 |
| python | python | 3.9.0 ≤ 𝑥 < 3.9.17 |
| python | python | 3.10.0 ≤ 𝑥 < 3.10.12 |
| python | python | 3.11.0 ≤ 𝑥 < 3.11.4 |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | management_services_for_element_software | - |
| netapp | management_services_for_netapp_hci | - |
| netapp | ontap_select_deploy_administration_utility | - |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pypy3 |
| ||||||||||||
| python2.7 |
| ||||||||||||
| python3.11 |
| ||||||||||||
| python3.9 |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.7 |
| ||||||||||||||||||||
| python3.10 |
| ||||||||||||||||||||
| python3.11 |
| ||||||||||||||||||||
| python3.4 |
| ||||||||||||||||||||
| python3.5 |
| ||||||||||||||||||||
| python3.6 |
| ||||||||||||||||||||
| python3.7 |
| ||||||||||||||||||||
| python3.8 |
| ||||||||||||||||||||
| python3.9 |
|
Common Weakness Enumeration
References