Description
An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2015-0455 Vulnerability (CVE-2015-0455)
Jenkins Insufficient Verification of Data Authenticity Vulnerability (CVE-2015-7539)
WordPress Plugin Poll, Survey, Questionnaire and Voting system SQL Injection (1.5.2)
XWiki Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-26476)
WordPress Plugin Admin Management Xtended Privilege Escalation (2.4.0)