CVE-2023-24329

2023-02-1715:15:12

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

40.9%

JSON

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

OSVersionArchitecturePackageVersionFilename
Debian12allpypy3<= 7.3.11+dfsg-2+deb12u1pypy3_7.3.11+dfsg-2+deb12u1_all.deb
Debian11allpypy3<= 7.3.5+dfsg-2+deb11u2pypy3_7.3.5+dfsg-2+deb11u2_all.deb
Debian10allpypy3<= 7.0.0+dfsg-3pypy3_7.0.0+dfsg-3_all.deb
Debian999allpypy3< 7.3.12+dfsg-1pypy3_7.3.12+dfsg-1_all.deb
Debian13allpypy3< 7.3.12+dfsg-1pypy3_7.3.12+dfsg-1_all.deb
Debian11allpython2.7< 2.7.18-8+deb11u1python2.7_2.7.18-8+deb11u1_all.deb
Debian10allpython2.7< 2.7.16-2+deb10u3python2.7_2.7.16-2+deb10u3_all.deb
Debian12allpython3.11<= 3.11.2-6python3.11_3.11.2-6_all.deb
Debian999allpython3.11< 3.11.4-1python3.11_3.11.4-1_all.deb
Debian13allpython3.11< 3.11.4-1python3.11_3.11.4-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pypy3	<= 7.3.11+dfsg-2+deb12u1	pypy3_7.3.11+dfsg-2+deb12u1_all.deb
Debian	11	all	pypy3	<= 7.3.5+dfsg-2+deb11u2	pypy3_7.3.5+dfsg-2+deb11u2_all.deb
Debian	10	all	pypy3	<= 7.0.0+dfsg-3	pypy3_7.0.0+dfsg-3_all.deb
Debian	999	all	pypy3	< 7.3.12+dfsg-1	pypy3_7.3.12+dfsg-1_all.deb
Debian	13	all	pypy3	< 7.3.12+dfsg-1	pypy3_7.3.12+dfsg-1_all.deb
Debian	11	all	python2.7	< 2.7.18-8+deb11u1	python2.7_2.7.18-8+deb11u1_all.deb
Debian	10	all	python2.7	< 2.7.16-2+deb10u3	python2.7_2.7.16-2+deb10u3_all.deb
Debian	12	all	python3.11	<= 3.11.2-6	python3.11_3.11.2-6_all.deb
Debian	999	all	python3.11	< 3.11.4-1	python3.11_3.11.4-1_all.deb
Debian	13	all	python3.11	< 3.11.4-1	python3.11_3.11.4-1_all.deb