Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2023-24329

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Related bugs and status

CVE-2023-24329 (Candidate) is related to these bugs:

Bug #2038879: [Debian] High CVE: CVE-2021-23336/CVE-2022-0391/CVE-2022-48560/CVE-2022-48565/CVE-2022-48566/CVE-2023-24329/CVE-2023-40217 python2.7: multiple CVEs

Summary				In	Importance	Status
	2038879	[Debian] High CVE: CVE-2021-23336/CVE-2022-0391/CVE-2022-48560/CVE-2022-48565/CVE-2022-48566/CVE-2023-24329/CVE-2023-40217 python2.7: multiple CVEs		StarlingX	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://github.com/pyt...
MISC: https://pointernull.co...
CONFIRM: https://security.netap...
FEDORA: FEDORA-2023-406c1c6ed7
FEDORA: FEDORA-2023-b3a3df39dd
FEDORA: FEDORA-2023-1092538441
FEDORA: FEDORA-2023-63c69aa712
FEDORA: FEDORA-2023-96aa33f0d3
FEDORA: FEDORA-2023-2b25dd2a11
FEDORA: FEDORA-2023-953c2607d8
FEDORA: FEDORA-2023-690e150a39
FEDORA: FEDORA-2023-81bb8e3b99
FEDORA: FEDORA-2023-994ecd7dbc
FEDORA: FEDORA-2023-d8b0003ecd
FEDORA: FEDORA-2023-56cefa23df
CONFIRM: https://github.com/pyt...
FEDORA: FEDORA-2023-03599274db
FEDORA: FEDORA-2023-309cadedc6
FEDORA: FEDORA-2023-31888c4781
FEDORA: FEDORA-2023-401947eb94
FEDORA: FEDORA-2023-acdfd145f2
FEDORA: FEDORA-2023-b854908745
FEDORA: FEDORA-2023-d294ef140e
FEDORA: FEDORA-2023-f52390b9d2
FEDORA: FEDORA-2023-dd526ed2e4
CERT-VN: VU#127587
MLIST: [debian-lts-announce] ...