Approved changes feed: RSS · Atom
cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Web2Py (c39a3613-3e52-52f5-a944-556c3112e90b) |
|---|---|
| Product | Web2Py (ddf40010-1a07-5f4d-a88f-d2a2bbf4c722) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/web2py/web2py |
purl2cpe | 2026-06-01 10:15:22.463670 |
pkg:pypi/web2py |
purl2cpe | 2026-06-01 10:15:22.463673 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25198 |
vulnerable | 2026-06-08 07:53:19.492600 |
Details available
MEDIUM (4.7)
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may be redirected to an arbitrary website when accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
Published: 2026-02-05T07:38:31.763Z
Updated: 2026-02-05T15:05:15.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45158 |
vulnerable | 2026-06-08 06:12:42.067961 |
Details available
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.
Published: 2023-10-16T07:53:52.134Z
Updated: 2024-09-18T14:02:11.090Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22432 |
vulnerable | 2026-06-08 05:54:25.980240 |
Details available
Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-07T21:45:54.676Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33146 |
vulnerable | 2026-06-08 05:44:46.294428 |
Details available
Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
Published: 2022-06-27T00:20:17.000Z
Updated: 2024-08-03T08:01:20.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4808 |
vulnerable | 2026-06-08 05:07:55.234036 |
Details available
Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim.
Published: 2017-01-11T16:00:00.000Z
Updated: 2024-08-06T00:39:26.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4807 |
vulnerable | 2026-06-08 05:07:55.233695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4806 |
vulnerable | 2026-06-08 05:07:55.233321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3957 |
vulnerable | 2026-06-08 05:07:46.311367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3954 |
vulnerable | 2026-06-08 05:07:46.258815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3953 |
vulnerable | 2026-06-08 05:07:46.258495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3952 |
vulnerable | 2026-06-08 05:07:46.258059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10321 |
vulnerable | 2026-06-08 05:07:17.767458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2311 |
vulnerable | 2026-06-08 05:04:24.736254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.