Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4r7-vm83-q2c7

Опубликовано: 06 мар. 2023
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Open redirect in web2py

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

Пакеты

Наименование

web2py

pip
Затронутые версииВерсия исправления

< 2.23.1

2.23.1

EPSS

Процентиль: 97%
0.38217
Средний

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 3 года назад

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

CVSS3: 6.1
nvd
почти 3 года назад

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

CVSS3: 6.1
debian
почти 3 года назад

Open redirect vulnerability exists in web2py versions prior to 2.23.1. ...

EPSS

Процентиль: 97%
0.38217
Средний

6.1 Medium

CVSS3

Дефекты

CWE-601