CVE-2016-4807 Web2py Reflected XSS vulnerability
MediumCVSS 4.8
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi web2py(PyPI) | <= 2.14.5 | No fix listed |
| pypi web2py(PyPI) | = 1.96.4 | No fix listed |
| pypi web2py(PyPI) | = 1.98.2 | No fix listed |
| pypi web2py(PyPI) | = 2.1.1 | No fix listed |
| web2py | <= 2.14.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- 39821 exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- pypi.org product
- github.com vendor-advisory