7.5
CVSSv3

CVE-2022-0391

Published: 09/02/2022 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an malicious user to input a crafted URL, leading to injection attacks. This flaw affects Python versions before 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

python python 3.10.0

python python

netapp ontap select deploy administration utility -

netapp hci -

netapp hci compute node -

netapp management services for element software -

netapp solidfire\\, enterprise sds \\& hci storage node -

netapp active iq unified manager -

fedoraproject fedora 34

fedoraproject fedora 35

oracle http server 12.2.1.3.0

oracle http server 12.2.1.4.0

oracle zfs storage appliance kit 8.8

Vendor Advisories

Several security issues were fixed in Python ...
In Python3's Lib/test/multibytecodec_supportpy CJK codec tests call eval() on content retrieved via HTTP (CVE-2020-27619) The package python/cpython is vulnerable to Web Cache Poisoning via urllibparseparse_qsl and urllibparseparse_qs by using a vector called parameter cloaking When the attacker can separate query parameters using a semicolo ...
In Python3's Lib/test/multibytecodec_supportpy CJK codec tests call eval() on content retrieved via HTTP (CVE-2020-27619) The package python/cpython is vulnerable to Web Cache Poisoning via urllibparseparse_qsl and urllibparseparse_qs by using a vector called parameter cloaking When the attacker can separate query parameters using a semicolo ...
Synopsis Moderate: python27-python and python27-python-pip security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python27-python and python27-python-pip is now available for Red Hat Software Collect ...
Synopsis Moderate: python27:27 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the python27:27 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this ...
Synopsis Moderate: Red Hat Advanced Cluster Management 253 security fixes and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 253 GeneralAvailability release images, which fix security issues and bugs, as well as update container imagesRed Hat Product Security has rated this up ...
Synopsis Moderate: Moderate:OpenShift Container Platform 4115 security and extras update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4115 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenSh ...
Synopsis Moderate: RHACS 372 enhancement and security update Type/Severity Security Advisory: Moderate Topic Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS) The updated image includes new features and bug fixesRed Hat Product Security has rated this update as having a security impact of Moderat ...
Synopsis Moderate: RHOSDT 260 operator/operand containers Security Update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat Openshift distributed tracing 260Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, w ...
Synopsis Important: OpenShift Virtualization 4120 Images security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 412 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact of ...
Synopsis Critical: Red Hat Advanced Cluster Management 246 security update and bug fixes Type/Severity Security Advisory: Critical Topic Red Hat Advanced Cluster Management for Kubernetes 246 GeneralAvailability release images, which fix bugs and update container imagesRed Hat Product Security has rated this update as having a security i ...
Synopsis Moderate: Openshift Logging Bug Fix Release and Security Update (5312) Type/Severity Security Advisory: Moderate Topic An update is now available for OpenShift Logging 5312Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a ...
概要 Moderate: OpenShift sandboxed containers 131 security fix and bug fix update タイプ/重大度 Security Advisory: Moderate トピック OpenShift sandboxed containers 131 is now available 説明 OpenShift sandboxed containers support for OpenShift Container Platformprovides users with built-in support for running Kata containe ...
Synopsis Moderate: OpenShift Container Platform 4115 bug fix and security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4115 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Cont ...
Synopsis Moderate: OpenShift Virtualization 4111 security and bug fix update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Virtualization release 4111 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...
Synopsis Moderate: python3 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a se ...
Synopsis Moderate: Red Hat Advanced Cluster Management 262 security update and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 262 GeneralAvailability release images, which fix bugs and update container imagesRed Hat Product Security has rated this update as having a security i ...