Lucene search

K
f5F5F5:K000135921
HistoryAug 22, 2023 - 12:00 a.m.

K000135921 : Python urllib.parse vulnerability CVE-2023-24329

2023-08-2200:00:00
my.f5.com
9
python urllib.parse
cve-2023-24329
bypass issue
blocklisting
f5 products
custom monitors
scripts

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.7%

Security Advisory Description

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. (CVE-2023-24329)

Impact

F5 products do not ship with Python scripts that utilize the affected Python module. In order to become vulnerable, customers must create custom monitors or scripts that utilize the Python urllib.parse module.