Skip to content
OpenAdvisories

Package · PyPI

web2py

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-22432 Public exploit

    Open redirect in web2py

    Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

    web2py web2py web2py web2py Ubuntu PyPI
  • Medium 4.5
    CVE-2016-4808 Public exploit

    Web2py Cross-Site Request Forgery vulnerability

    Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just…

    web2py PyPI
  • Medium 4.8
    CVE-2016-4807 Public exploit

    Web2py Reflected XSS vulnerability

    Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).

    web2py web2py Ubuntu PyPI