p PatchFirst

CVE-2026-79318

CVE-2026-79318

This page contains facts from public vulnerability sources. Check the original advisory before updating.

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).

CVSS 6.5 · Medium · EPSS 0.6%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • web2py Ubuntu:16.04:LTS

    Versions
    • 1.99.7-1
    • 2.12.3-1
    • 2.12.3-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →