CVE-2015-6961 Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/lo...
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web2py | = 2.9.11 | No fix listed |
References
- github.com patch third-party-advisory
- github.com third-party-advisory