← Database

CVE-2023-24622

MEDIUM CVSS: 5.3 Published: 2023-01-30 Modified: 2026-06-17

Description

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.

Affected Platforms

Includesecurity Safeurl-Python

Weakness Type

CWE-918, CWE-918

References