CVE-2023-24329

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-24329
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-24329.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-24329
Aliases
Downstream
Related
Published
2023-02-17T15:15:12.243Z
Modified
2026-03-15T22:46:57.891561Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

References

Affected packages

Git / github.com/python/cpython

Affected ranges

Type
GIT
Repo
https://github.com/python/cpython
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ecd9946c9d1df7cd1aa15d08d72bbcc0899d272d
Introduced
fa919fdf2583bdfead1df00e842f24f30b2a34bf
Fixed
9a2d5311d1201818d3942b1ea1ab2ad290b45254
Introduced
9cf6752276e6fcfd0c23fdb064ad27f448aaaf75
Fixed
0d3cd4eb6671872d8d9f049327d196e759615f70
Introduced
b494f5935c92951e75597bfe1c8b1f3112fec270
Fixed
b4e48a444ea02921ce4b701fe165e6cfd4cf5845
Introduced
deaf509e8fc6e0363bd6f26d52ad42f976ec42f2
Fixed
d2340ef25721b6a72d45d4508c672c4be38c67d3
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.7.17"
        },
        {
            "introduced": "3.8.0"
        },
        {
            "fixed": "3.8.17"
        },
        {
            "introduced": "3.9.0"
        },
        {
            "fixed": "3.9.17"
        },
        {
            "introduced": "3.10.0"
        },
        {
            "fixed": "3.10.12"
        },
        {
            "introduced": "3.11.0"
        },
        {
            "fixed": "3.11.4"
        }
    ]
}

Affected versions

v3.*
v3.10.0
v3.10.1
v3.10.10
v3.10.11
v3.10.2
v3.10.3
v3.10.4
v3.10.5
v3.10.6
v3.10.7
v3.10.8
v3.10.9
v3.11.0
v3.11.1
v3.11.2
v3.11.3

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "38"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-24329.json"