{"vulnerability": "CVE-2023-24329", "sightings": [{"uuid": "9e1bdcfb-7c3a-4b86-a44c-797cebed5a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "fc2dca5b-3ee8-4874-bf66-6c8321c196fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "df988a35-506c-4dc2-b868-0406bfe38063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5397", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExample of CVE-2023-24329 \nURL\uff1ahttps://github.com/JawadPy/CVE-2023-24329-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-10-13T07:51:29.000000Z"}, {"uuid": "6224f32c-edd8-4334-a9c4-03784fa79802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-24329\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.\n\ud83d\udccf Published: 2023-02-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T16:26:01.513Z\n\ud83d\udd17 References:\n1. https://pointernull.com/security/python-url-parse-problem.html\n2. https://github.com/python/cpython/pull/99421\n3. https://security.netapp.com/advisory/ntap-20230324-0004/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/\n7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/\n8. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/\n9. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/\n10. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/\n11. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/\n12. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/\n13. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/\n14. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/\n15. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/\n16. https://github.com/python/cpython/issues/102153\n17. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/\n18. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/\n19. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/\n20. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/\n21. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/\n22. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/\n23. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/\n24. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/\n25. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/\n26. https://www.kb.cert.org/vuls/id/127587\n27. https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "creation_timestamp": "2025-03-18T16:51:24.000000Z"}, {"uuid": "7d0574cf-ac0f-4177-93f1-9c8579470e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/arpsyndicate/1630", "content": "#ExploitObserverAlert\n\nCVE-2023-24329\n\nDESCRIPTION: Exploit Observer has 25 entries related to CVE-2023-24329. An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.\n\nFIRST-EPSS: 0.000700000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-10T13:59:40.000000Z"}, {"uuid": "39f88d7c-d1ca-4bbb-8de0-5d07f4115071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/cibsecurity/58437", "content": "\u203c CVE-2023-24329 \u203c\n\nAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T18:13:12.000000Z"}, {"uuid": "8fcaf771-123f-49e6-bfba-fcd8482676f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/thehackernews/3732", "content": "\ud83d\udea8 Critical Python URL parsing flaw (CVE-2023-24329) discovered! Allows domain filter bypass, enabling file reads & command execution. \n \nFind details here: https://thehackernews.com/2023/08/new-python-url-parsing-flaw-enables.html", "creation_timestamp": "2023-08-12T08:06:51.000000Z"}, {"uuid": "30ea04a7-7c0f-4590-9eae-e21e2fdad5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/CVEhub/19247", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-24329-PoC*\nGithub: https://github.com/H4R335HR/CVE-2023-24329-PoC", "creation_timestamp": "2026-07-29T12:00:06.505637Z"}, {"uuid": "e787cbbb-10f4-40f1-9a80-54567dc06add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/CVEhub/19335", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-24329-codeql-test*\nGithub: https://github.com/Pandante-Central/CVE-2023-24329-codeql-test", "creation_timestamp": "2026-07-29T12:00:06.150293Z"}, {"uuid": "dd408835-8d40-4a62-8c30-2d06dc4f9dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/19247", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-24329-PoC*\nGithub: https://github.com/H4R335HR/CVE-2023-24329-PoC", "creation_timestamp": "2026-07-30T00:00:25.328159Z"}, {"uuid": "d7f8f88e-979d-449c-bd35-e6d6cc4d8efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/19335", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-24329-codeql-test*\nGithub: https://github.com/Pandante-Central/CVE-2023-24329-codeql-test", "creation_timestamp": "2026-07-30T00:00:27.263014Z"}, {"uuid": "a599d160-4b90-4025-bed0-ec994ee1456a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/Hackme_news/816", "content": "\ud83d\udea8\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Python (CVE-2023-24329)! \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043e\u043c\u0435\u043d\u0430, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434. \n\n\u00ab\u0423 urlparse \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043a\u043e\u0433\u0434\u0430 \u0432\u0435\u0441\u044c URL-\u0430\u0434\u0440\u0435\u0441 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0443\u0441\u0442\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043f\u044f\u0442\u043d\u0438\u0447\u043d\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u00ab\u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043a\u0430\u043a \u043d\u0430 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0441\u0445\u0435\u043c\u0443, \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u043b\u044e\u0431\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0432 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a\u00bb.", "creation_timestamp": "2026-09-01T17:00:07.858502Z"}, {"uuid": "e8faeae0-fb19-462e-b616-d73b95c5801b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/hacking_Attack/114315", "content": "Black Hat Ethical Hacking\nCritical Python URL Parsing Flaw Allows Bypass of Filtering Methods\n\nCritical Python URL Parsing Flaw Allows Bypass of Filtering MethodsPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA significant security vulnerability has been unveiled in Python\u2019s URL parsing function, which could potentially be exploited to evade domain or protocol filtering mechanisms that rely on blocklists. The flaw, identified as CVE-2023-24329 and credited to security researcher Yebo Cao, has a CVSS score of 7.5 and could lead to arbitrary file reads and command execution. The CERT Coordination Center (CERT/CC) published an advisory on this issue, emphasizing that the vulnerability arises when the entire URL commences with blank characters, thereby rendering domain and scheme filtering methods ineffective.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhg66CYGvFwu2vQexMDYDQd4mGG3y4-j_nH943rfM7fJ4w3l8n-zZc8Nf5VKhhciAOeWUPQb2u57-6bEHUhW-9cA0zwMHpFRRwaFCKCzeQdT_lxImldHO1qTNMf5_BFIMUInT11wwlCE_cWz2li5-LPDFKVq3u_ZhaV2he0IoEDUMnC5fYT8jYGzgjXnHDp/s728-e3650/python.jpg \n\nThis security concern has prompted action from the Python community, resulting in the release of patched versions to address the vulnerability. The flaw has been mitigated in the following versions:\n\n* Version 3.12 and above\n* Version 3.11.x starting from 3.11.4\n* Version 3.10.x starting from 3.10.12\n* Version 3.9.x starting from 3.9.17\n* Version 3.8.x starting from 3.8.17\n* Version 3.7.x starting from 3.7.17\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe urllib.parse function is widely utilized for breaking down URLs into their individual components or assembling components into a complete URL string. However, CVE-2023-24329 underscores a vulnerability due to inadequate input validation. This vulnerability allows threat actors to bypass blocklisting methods by providing a URL that initiates with blank characters, such as \u201d https://youtube[.]com\u201c.\n\nSecurity researcher Yebo Cao remarked, \u201cWhile blocklisting may not be the most robust solution, it remains relevant in various scenarios. This vulnerability empowers attackers to elude the protection mechanisms devised by developers for schemes and hosts. It is anticipated that this vulnerability could facilitate Server-Side Request Forgery (SSRF) and Remote Code Execution (RCE) in a wide array of contexts.\u201d\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump\nTrending: Offensive Security Tool: Nucleimonst3r\nThis disclosure takes place against the backdrop of recent research that has brought attention to security fixes within the Python language. Some of these fixes occur silently, lacking a corresponding Common Vulnerabilities and Exposures (CVE) identifier. This \u201csilent\u201d approach to code commits potentially exposes unpatched systems to the risk of exploitation by malicious actors, highlighting the significance of thorough and transparent security practices.\nTrending: Critical Vulnerability in Visual Studio Code, Malicious Extensions Can Steal Authentication Tokens\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: thehackernews.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/u[...]", "creation_timestamp": "2026-09-01T20:00:53.074607Z"}, {"uuid": "b1b681cb-9785-446e-8bbf-4158deaecace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/hacking_Attack/114315", "content": "Black Hat Ethical Hacking\nCritical Python URL Parsing Flaw Allows Bypass of Filtering Methods\n\nCritical Python URL Parsing Flaw Allows Bypass of Filtering MethodsPost Views: 2 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA significant security vulnerability has been unveiled in Python\u2019s URL parsing function, which could potentially be exploited to evade domain or protocol filtering mechanisms that rely on blocklists. The flaw, identified as CVE-2023-24329 and credited to security researcher Yebo Cao, has a CVSS score of 7.5 and could lead to arbitrary file reads and command execution. The CERT Coordination Center (CERT/CC) published an advisory on this issue, emphasizing that the vulnerability arises when the entire URL commences with blank characters, thereby rendering domain and scheme filtering methods ineffective.\n\nhttps://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhg66CYGvFwu2vQexMDYDQd4mGG3y4-j_nH943rfM7fJ4w3l8n-zZc8Nf5VKhhciAOeWUPQb2u57-6bEHUhW-9cA0zwMHpFRRwaFCKCzeQdT_lxImldHO1qTNMf5_BFIMUInT11wwlCE_cWz2li5-LPDFKVq3u_ZhaV2he0IoEDUMnC5fYT8jYGzgjXnHDp/s728-e3650/python.jpg \n\nThis security concern has prompted action from the Python community, resulting in the release of patched versions to address the vulnerability. The flaw has been mitigated in the following versions:\n\n* Version 3.12 and above\n* Version 3.11.x starting from 3.11.4\n* Version 3.10.x starting from 3.10.12\n* Version 3.9.x starting from 3.9.17\n* Version 3.8.x starting from 3.8.17\n* Version 3.7.x starting from 3.7.17\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe urllib.parse function is widely utilized for breaking down URLs into their individual components or assembling components into a complete URL string. However, CVE-2023-24329 underscores a vulnerability due to inadequate input validation. This vulnerability allows threat actors to bypass blocklisting methods by providing a URL that initiates with blank characters, such as \u201d https://youtube[.]com\u201c.\n\nSecurity researcher Yebo Cao remarked, \u201cWhile blocklisting may not be the most robust solution, it remains relevant in various scenarios. This vulnerability empowers attackers to elude the protection mechanisms devised by developers for schemes and hosts. It is anticipated that this vulnerability could facilitate Server-Side Request Forgery (SSRF) and Remote Code Execution (RCE) in a wide array of contexts.\u201d\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump\nTrending: Offensive Security Tool: Nucleimonst3r\nThis disclosure takes place against the backdrop of recent research that has brought attention to security fixes within the Python language. Some of these fixes occur silently, lacking a corresponding Common Vulnerabilities and Exposures (CVE) identifier. This \u201csilent\u201d approach to code commits potentially exposes unpatched systems to the risk of exploitation by malicious actors, highlighting the significance of thorough and transparent security practices.\nTrending: Critical Vulnerability in Visual Studio Code, Malicious Extensions Can Steal Authentication Tokens\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: thehackernews.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/u[...]", "creation_timestamp": "2026-09-02T01:01:12.849113Z"}, {"uuid": "79067aba-2616-4ad4-899a-553163ccddbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-24329", "type": "seen", "source": "https://t.me/Hackme_news/816", "content": "\ud83d\udea8\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Python (CVE-2023-24329)! \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043e\u043c\u0435\u043d\u0430, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044f \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434. \n\n\u00ab\u0423 urlparse \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043a\u043e\u0433\u0434\u0430 \u0432\u0435\u0441\u044c URL-\u0430\u0434\u0440\u0435\u0441 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0443\u0441\u0442\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043f\u044f\u0442\u043d\u0438\u0447\u043d\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u00ab\u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043a\u0430\u043a \u043d\u0430 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0441\u0445\u0435\u043c\u0443, \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u0431\u043e\u044e \u043b\u044e\u0431\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0432 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a\u00bb.", "creation_timestamp": "2026-09-02T01:03:36.331579Z"}]}