Skip to content
OpenAdvisories

Package · Ubuntu

web2py

12 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-22432 Public exploit

    Open redirect in web2py

    Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

  • Medium 4.8
    CVE-2016-4807 Public exploit

    Web2py Reflected XSS vulnerability

    Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).