CyberSecBulletin

Web2py vulnerabilities

We track 1 vulnerability in Web2py products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Web2py vulnerabilities

  • 9.8 Critical severity

    web2py: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-45158Web2pyEPSS 4.41%

    An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using th