Lucene search
+L
IncludesecuritySafeurl-python

1 matches found

CVE
CVE
added 2023/01/30 12:0 a.m.94 views

CVE-2023-24622

CVE-2023-24622 affects the safeurl-python package (Python) prior to 1.2. The vulnerability stems from an insufficiently restrictive regular expression in isInList for external domains, enabling server-side request forgery (SSRF). Multiple sources (NVD, Red Hat, OSV, PRION, others) corroborate the...

5.3CVSS5.3AI score0.00558EPSS
Save