← Database

CVE-2022-0391

HIGH CVSS: 7.5 Published: 2022-02-09 Modified: 2026-06-17

Description

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.

Affected Platforms

Netapp Ontap Select Deploy Administration UtilityNetapp Solidfire\, Enterprise Sds \& Hci Storage NodeOracle Http ServerNetapp HciFedoraproject FedoraNetapp Hci Compute NodeOracle Zfs Storage Appliance KitNetapp Active Iq Unified ManagerNetapp Management Services For Element SoftwarePython Python

Weakness Type

CWE-74, CWE-74

References