Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
web2py 输入验证错误漏洞
Vulnerability Description
web2py是web2py开源的一个免费和开源的全栈企业框架。用于敏捷开发安全的数据库驱动的基于 Web 的应用程序。 web2py 2.27.1-stable+timestamp.2023.11.16.08.03.57及之前版本存在输入验证错误漏洞，该漏洞源于开放重定向，可能导致用户访问特制URL时被重定向至任意网站，成为钓鱼攻击受害者。
CVSS Information
N/A
Vulnerability Type
N/A