p PatchFirst

CVE-2016-4807

CVE-2016-4807

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).

CVSS 4.8 · Medium · EPSS 2.3% · Public exploit

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • web2py PyPI

    Versions
    • 1.96.4
    • 1.98.2
    • 2.1.1
    Affected ranges
    • ECOSYSTEM: ≤ 2.14.5

    No fix published

  • web2py Ubuntu:16.04:LTS

    Versions
    • 1.99.7-1
    • 2.12.3-1
    • 2.12.3-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →