Уязвимость CVE-2023-24329: Информация

Описание

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Важность: HIGH (7,5) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Исправленные пакеты

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

      Start including

      3.10.0

      End excliding

      3.10.12

      ---

      cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

      Start including

      3.9.0

      End excliding

      3.9.17

      ---

      cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

      Start including

      3.8.0

      End excliding

      3.8.17

      ---

      cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

      End excliding

      3.7.17

      ---

      cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

      Start including

      3.11.0

      End excliding

      3.11.4

      ---

      Конфигурация 2

      cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

      ---

      Конфигурация 3

      cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

      ---

      cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

      ---

      cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:*

      ---