CVE-2024-42353

CVE-2024-42353 affects WebOb, a library used for HTTP requests and responses, specifically in how it normalizes the HTTP Location header. The vulnerability arises from an improper URL parsing and joining mechanism that can lead to an attacker-controlled hostname being injected into the redirect URL. Rated as Medium severity (CVSS 6.1), it has a network attack vector, low attack complexity, and requires user interaction, potentially leading to information disclosure and integrity impacts. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.