CVE-2023-24329 PoC — Python 输入验证错误漏洞

Source

https://github.com/H4R335HR/CVE-2023-24329-PoC

Associated Vulnerability

Title: Python 输入验证错误漏洞 (CVE-2023-24329)
Description:An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Readme

# CVE-2023-24329-PoC

A short and inforamtional PoC on CVE-2023-24329: Python urllib parsing flaw.

```
git clone https://github.com/H4R335HR/CVE-2023-24329-PoC
cd CVE-2023-24329-PoC
python3 CVE-2023-24329-PoC.py
```
Based on research by Yebo Cao - https://pointernull.com/security/python-url-parse-problem.html

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →