Python Parsing Error Enabling Bypass CVE-2023-24329

Post Reply
Shane1145
Posts: 1624
Joined: Wed Sep 25, 2024 2:31 pm

Python Parsing Error Enabling Bypass CVE-2023-24329

Post by Shane1145 »

urllib.parse is a very basic and widely used basic URL parsing function in various applications.

Description
An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

https://www.kb.cert.org/vuls/id/127587
Post Reply