CVE-2022-33146

Опубликовано: 27 июн. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

Ссылки

http://web2py.com/
Product
Vendor Advisory
https://github.com/web2py/web2py/commit/a181b855a43cb8b479d276b082cfcde385768451
Patch
Third Party Advisory
https://github.com/web2py/web2py/commit/d9805606f88f00c0be56438247605cefde73e14e#diff-c1d01f37ee54d813815718760b9c4d7b274e2be7ad18f65552cd564336ab593bR110
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN02158640/index.html
Third Party Advisory
VDB Entry
http://web2py.com/
Product
Vendor Advisory
https://github.com/web2py/web2py/commit/a181b855a43cb8b479d276b082cfcde385768451
Patch
Third Party Advisory
https://github.com/web2py/web2py/commit/d9805606f88f00c0be56438247605cefde73e14e#diff-c1d01f37ee54d813815718760b9c4d7b274e2be7ad18f65552cd564336ab593bR110
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN02158640/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:*

Версия до 2.22.5 (исключая)

EPSS

Процентиль: 69%

0.00598

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2022-33146

CVSS3: 6.1

ubuntu

больше 3 лет назад

CVE-2022-33146

CVSS3: 6.1

debian

больше 3 лет назад

Open redirect vulnerability in web2py versions prior to 2.22.5 allows ...

GHSA-cgrj-xjm7-9q27

CVSS3: 6.1

github

больше 3 лет назад

Open redirect in web2py

EPSS

Процентиль: 69%

0.00598

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601