Description
An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)
Joomla! Core 1.5.x Open Redirect (1.5.0 - 1.5.6)
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)
Oracle JRE CVE-2020-2593 Vulnerability (CVE-2020-2593)
WordPress Plugin WP Google Maps Cross-Site Scripting (6.3.14)