CVE-2023-24622

Published January 30th, 2023

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.

IncludeSecurity/safeurl-python

Python implementation of SafeURL (Anti-SSRF Lib)

GitHub