CVE-2023-22432

2023-03-0500:00:00

jpcert

www.cve.org

cve-2023-22432

web2py

open redirect

phishing attack

EPSS

0.003

Percentile

66.2%

JSON

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

CNA Affected

[
  {
    "vendor": "web2py",
    "product": "web2py",
    "versions": [
      {
        "version": "versions prior to 2.23.1",
        "status": "affected"
      }
    ]
  }
]