4 matches found
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF...
5.3CVSS6.8AI score0.00558EPSS
SaveExploits1References1
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF...
5.3CVSS5.3AI score0.00558EPSS
SaveExploits1References1
CVE-2023-24622
CVE-2023-24622 affects the safeurl-python package (Python) prior to 1.2. The vulnerability stems from an insufficiently restrictive regular expression in isInList for external domains, enabling server-side request forgery (SSRF). Multiple sources (NVD, Red Hat, OSV, PRION, others) corroborate the...
5.3CVSS5.3AI score0.00558EPSS
SaveExploits1References1Affected Software1
20