An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
2.7.18-1~20.04.73.8.10-0ubuntu1~20.04.82.7.18-13ubuntu1.53.10.6-1~22.04.2ubuntu1.12.7.6-8ubuntu0.6+esm153.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm10+24 more3.5.2-2ubuntu0~16.04.4~14.04.1+esm12.7.12-1ubuntu0~16.04.18+esm53.5.2-2ubuntu0~16.04.13+esm82.7.17-1~18.04ubuntu1.13Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:NI:HA:NCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N