CVE-2022-33146: Open redirect in web2py

June 27, 2022 (updated July 7, 2022)

Open redirect vulnerability in web2py allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

References

github.com/advisories/GHSA-cgrj-xjm7-9q27
github.com/web2py/web2py/commit/a181b855a43cb8b479d276b082cfcde385768451
github.com/web2py/web2py/commit/d9805606f88f00c0be56438247605cefde73e14e
jvn.jp/en/jp/JVN02158640/index.html
nvd.nist.gov/vuln/detail/CVE-2022-33146

Code Behaviors & Features

Detect and mitigate CVE-2022-33146 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →