CVE-2024-11168

The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.

Open
LOW (0.8)
  • T

    Tim Bastin detected CVE-2024-11168

  • logo

    System updated the risk assessment to 1.7

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-11168

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 1.7

  • logo

    System updated the risk assessment to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 1.7

    System recalculated raw risk assessment

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 1.7

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 1.7

  • logo

    System updated the risk assessment to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System

  • logo

    System fixed CVE-2024-11168

  • logo

    System detected CVE-2024-11168 with a risk of 0.85

  • logo

    System detected CVE-2024-11168 with a risk of 0.85

  • logo

    System

  • logo

    System fixed CVE-2024-11168

  • logo

    System detected CVE-2024-11168 with a risk of 0.85

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 0.85

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 0.85

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 0.85

  • T

    Tim Bastin detected CVE-2024-11168 with a risk of 0.85

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-11168

  • logo

    System updated the risk assessment from 0.85 to 1.7

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.7 to 0.85

    System recalculated raw risk assessment

  • S

    Sebastian Kawelke updated the risk assessment from 1.7 to 2.04

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.7 to 2.04

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.7 to 2.04

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 0.85 to 1.02

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • logo

    System updated the risk assessment from 2.04 to 2.05

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.04 to 2.05

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.04 to 2.05

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.05 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.05 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.05 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.02 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.85 to 0.42

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System fixed CVE-2024-11168

  • logo

    System detected CVE-2024-11168 with a risk of 0.42

  • logo

    System updated the risk assessment from 0.42 to 0.85

    System recalculated raw risk assessment

Add a comment

Mark as False Positive
Last calculated at:

Affected component

debian/python3.11

Installed version:
3.11.2-6
Fixed in:
no patch available

Management decisions across the organization

Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 2ab7b793efd72421aea8c3a994ac60202bf1b3a5