Lucene search
+L

246 matches found

Veracode
Veracode
•added 2023/03/02 9:55 a.m.•23 views

Open Redirect

web2py is vulnerable to Open Redirect. A remote attacker is able to redirect the user to an arbitrary website by providing a specially crafted URL, which can result in a phishing attack...

6.1CVSS6.2AI score0.02402EPSS
SaveExploits1References6Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/02/28 6:00 a.m.•24 views

web2py development tool vulnerable to open redirect

Overview The admin development tool included in the web2py source code contains an open redirect vulnerability CWE-601. According to the developer, they do not recommend using the tool in operational environment or disclosing it on the Internet. Takuto Yoshikai of Aeye Security Lab reported this...

6.1CVSS6.8AI score0.02402EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/02/28 12:00 a.m.•21 views

web2py input validation vulnerability

web2py is web2py open source a free and open source full stack enterprise framework. Used for agile development of secure database-driven Web-based applications . A security vulnerability exists in web2py versions prior to 2.23.1 that stems from the presence of an open redirection vulnerability,...

6.1CVSS5.8AI score0.02402EPSS
SaveExploits1References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/02/28 12:00 a.m.•51 views

JVN#78253670: web2py development tool vulnerable to open redirect

The admin development tool included in the web2py source code contains an open redirect vulnerability CWE-601. According to the developer, they do not recommend using the tool in operational environment or disclosing it on the Internet. Impact When using the tool, a web2py user may be redirected ...

6.1CVSS6.2AI score0.02402EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/06/28 12:01 a.m.•38 views

Open redirect in web2py

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS6.1AI score0.01862EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/06/28 12:01 a.m.•57 views

GHSA-CGRJ-XJM7-9Q27 Open redirect in web2py

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS6.1AI score0.01862EPSS
SaveExploits1References6
Veracode
Veracode
•added 2022/06/27 7:12 p.m.•30 views

Open Redirect

web2py is vulnerable to open redirect. The vulnerability exists due to a lack of sanitization allowing an attacker to redirect url's to an attacker controlled site...

6.1CVSS6.1AI score0.01862EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2022/06/27 1:15 a.m.•46 views

CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS0.01862EPSS
SaveExploits1References4
Prion
Prion
•added 2022/06/27 1:15 a.m.•14 views

Open redirect

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

5.8CVSS6.1AI score0.01862EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2022/06/27 1:15 a.m.•44 views

CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS6.2AI score0.01862EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/06/27 1:15 a.m.•22 views

UBUNTU-CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS5.8AI score0.01862EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/06/27 12:20 a.m.•33 views

CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.2AI score0.01862EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/06/27 12:20 a.m.•50 views

CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.3AI score0.01862EPSS
SaveExploits1References4
CVE
CVE
•added 2022/06/27 12:20 a.m.•130 views

CVE-2022-33146

CVE-2022-33146 describes an open redirect vulnerability in web2py versions prior to 2.22.5. The issue allows a remote attacker to redirect a user to an arbitrary site and facilitate phishing by triggering a specially crafted URL. Affected software is web2py (versions

6.1CVSS6AI score0.01862EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2022/06/27 12:20 a.m.•9 views

CVE-2022-33146

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS0.01862EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•6 views

CVE-2022-33146: URL Redirection to Untrusted Site

Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS5.9AI score0.01862EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/27 12:00 a.m.•11 views

PT-2022-21708

Name of the Vulnerable Software and Affected Versions web2py versions prior to 2.22.5 Description The issue allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. This can be achieved through an open...

6.1CVSS6.2AI score0.01862EPSS
SaveExploits1References15
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/06/23 5:21 a.m.•21 views

web2py vulnerable to open redirect

Overview web2py contains an open redirect vulnerability CWE-601. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When accessing a specially crafted URL, t...

6.1CVSS6.6AI score0.01862EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/06/23 12:00 a.m.•52 views

JVN#02158640: web2py vulnerable to open redirect

web2py contains an open redirect vulnerability CWE-601. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the Software Update the software to the latest version accordi...

6.1CVSS6.1AI score0.01862EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/06/23 12:00 a.m.•26 views

web2py input validation vulnerability

web2py is web2py open source a free and open source full stack enterprise framework. Used for agile development of secure database-driven Web-based applications. A security vulnerability exists in web2py. No information about this vulnerability is available at this time, please stay tuned to CNNV...

6.1CVSS5.7AI score0.01862EPSS
SaveExploits1References7
Rows per page
Query Builder