Опубликовано: 05 фев. 2026
Источник: github
Github: Прошло ревью
CVSS4: 5.1
CVSS3: 4.7
Описание
web2py has an Open Redirect Vulnerability
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an Open Redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
Пакеты
Наименование
web2py
pip
Затронутые версииВерсия исправления
< 3.1.1
3.1.1
Связанные уязвимости
CVSS3: 4.7
nvd
2 дня назад
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
CVSS3: 4.7
debian
2 дня назад
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior ...