CVE-2023-22432: Open redirect in web2py

March 6, 2023 (updated March 8, 2025)

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

References

github.com/advisories/GHSA-w4r7-vm83-q2c7
jvn.jp/en/jp/JVN78253670
nvd.nist.gov/vuln/detail/CVE-2023-22432

Code Behaviors & Features

Detect and mitigate CVE-2023-22432 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →