CVE-2016-4808

CVE-2016-4808

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim.

CVSS 4.5 · Medium · EPSS 1.8% · Public exploit · Fix available

Published

2017-01-11T16:00:00.000Z

Updated

2024-08-06T00:39:26.205Z

Stack: python

Check your server →