CVE-2022-33146

Name of the Vulnerable Software and Affected Versions web2py versions prior to 2.22.5

Description The issue allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having the user access a specially crafted URL. This can be achieved through an open redirect vulnerability.

Recommendations For versions prior to 2.22.5, update to version 2.22.5 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable URLs to minimize the risk of exploitation.