← Database

CVE-2023-24329

HIGH CVSS: 7.5 Published: 2023-02-17 Modified: 2026-06-17

Description

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Affected Platforms

Netapp Ontap Select Deploy Administration UtilityFedoraproject FedoraNetapp Management Services For Netapp HciNetapp Active Iq Unified ManagerNetapp Management Services For Element SoftwarePython Python

Weakness Type

CWE-20, CWE-20

References