Vulnerabilities in web2py
4 resultsCVE-2023-45158—An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for loggiEPSS 3.7%CVE-2023-22432MEDIUMOpen redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary EPSS 2.4%CVE-2022-33146—Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and condEPSS 1.4%CVE-2026-25198MEDIUMweb2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploEPSS 0.3%