CVE:CVE-2023-24329
CNNVD:CNNVD-202302-1513
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 3.11之前版本存在输入验证错误漏洞，该漏洞源于允许攻击者通过提供以空白字符开头的URL来绕过黑名单。
solution:Upgrade python python to a higher version than 3.7.17,3.8.17,3.9.17,3.10.12,3.11.4,and avoid the version (,3.7.17),[3.8.0,3.8.17),[3.9.0,3.9.17),[3.10.0,3.10.12),[3.11.0,3.11.4); Upgrade fedoraproject fedora to a higher version than 36,37,38,and avoid the version 36,37,38; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade netapp management_services_for_netapp_hci to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -