Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g8vh-644m-955p

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.

EPSS

Процентиль: 46%
0.0023
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 8 лет назад

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.

CVSS3: 6.1
nvd
больше 8 лет назад

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.

CVSS3: 6.1
debian
больше 8 лет назад

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows ...

EPSS

Процентиль: 46%
0.0023
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601