Security Advisory

CVE-2015-6961

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-10-18 20:00:00
Last updated 2024-08-06 07:36:34
Assigner mitre
State PUBLISHED

Description

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the _next parameter to user/logout.