CVE-2022-33146

2022-06-2700:20:17

jpcert

www.cve.org

open redirect

web2py

vulnerability

phishing attack

specially crafted url

EPSS

0.002

Percentile

52.7%

JSON

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

CNA Affected

[
  {
    "product": "web2py",
    "vendor": "web2py",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 2.22.5"
      }
    ]
  }
]