web2py vulnerable to open redirect

Overview web2py contains the following vulnerability. Open redirect CWE-601 - CVE-2026-25198 Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When accessing a speciall...

CVE-2026-25198

web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing atta...

web2py 输入验证错误漏洞

Web2py is an open-source, free, and open-source full-stack enterprise framework developed by Web2py. It is used for developing secure, database-driven web applications in an agile manner. Versions of Web2py prior to 2.27.1-stable+timestamp.2023.11.16.08.03.57 contained a vulnerability related to...

CVE-2026-25198: URL Redirection to Untrusted Site

web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing atta...

PT-2026-6280

Name of the Vulnerable Software and Affected Versions web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior Description The software contains an open redirect issue. Successful exploitation could allow a user to be redirected to a website chosen by an attacker when accessing a...

CVE-2023-45158

An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging not the default configuration, a crafted web request may execute an arbitrary OS command on the web server using the product...

EUVD-2016-5790

Malware in sbrugna...

EUVD-2013-2257

Malware in sbrugna...

EUVD-2015-6893

Malware in sbrugna...

EUVD-2016-4964

Malware in sbrugna...

EUVD-2016-5789

Malware in sbrugna...

EUVD-2022-6023

Malicious code in bioql PyPI...

EUVD-2022-4011

Malicious code in bioql PyPI...

EUVD-2022-4423

Malicious code in bioql PyPI...

EUVD-2022-3984

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-22432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing...

Linux Distros Unpatched Vulnerability : CVE-2023-45158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging not the default...

Linux Distros Unpatched Vulnerability : CVE-2016-4807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user admin...

Linux Distros Unpatched Vulnerability : CVE-2016-4806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive...

Linux Distros Unpatched Vulnerability : CVE-2022-33146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attac...