Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-18T20:00:00
Updated: 2024-08-06T07:36:34.523Z
Reserved: 2015-09-15T00:00:00
Link: CVE-2015-6961
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-10-18T20:29:00.387
Modified: 2017-10-31T22:09:30.193
Link: CVE-2015-6961
Redhat
No data.