Read the docs
TI-2013-02060 Aliases CVE-2013-2311GHSA-5wj6-jfcv-m6c3

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social…

Priority LOW 22CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Why it matters now

EPSS 0.0118 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 151

CPEVersionsRoleVendor
cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:*up to 2.2.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.16.0:*:*:*:*:*:*:*1.16.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.17.0:*:*:*:*:*:*:*1.17.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.18.0:*:*:*:*:*:*:*1.18.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.19.0:*:*:*:*:*:*:*1.19.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.20.0:*:*:*:*:*:*:*1.20.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.21.0:*:*:*:*:*:*:*1.21.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.22.0:*:*:*:*:*:*:*1.22.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.23.0:*:*:*:*:*:*:*1.23.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.24.0:*:*:*:*:*:*:*1.24.0Vulnerableweb2py
  • cpe:2.3:a:web2py:web2py:*:*:*:*:*:*:*:* Versions up to 2.2.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.16.0:*:*:*:*:*:*:* Versions 1.16.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.17.0:*:*:*:*:*:*:* Versions 1.17.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.18.0:*:*:*:*:*:*:* Versions 1.18.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.19.0:*:*:*:*:*:*:* Versions 1.19.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.20.0:*:*:*:*:*:*:* Versions 1.20.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.21.0:*:*:*:*:*:*:* Versions 1.21.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.22.0:*:*:*:*:*:*:* Versions 1.22.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.23.0:*:*:*:*:*:*:* Versions 1.23.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.24.0:*:*:*:*:*:*:* Versions 1.24.0 Vulnerable ·web2py
Show 141 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:web2py:web2py:1.25.0:*:*:*:*:*:*:*1.25.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.26.0:*:*:*:*:*:*:*1.26.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.27.0:*:*:*:*:*:*:*1.27.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.28.0:*:*:*:*:*:*:*1.28.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.29.0:*:*:*:*:*:*:*1.29.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.30.0:*:*:*:*:*:*:*1.30.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.31.0:*:*:*:*:*:*:*1.31.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.40.0:*:*:*:*:*:*:*1.40.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.41.0:*:*:*:*:*:*:*1.41.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.42.0:*:*:*:*:*:*:*1.42.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.43.0:*:*:*:*:*:*:*1.43.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.44.0:*:*:*:*:*:*:*1.44.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.45.0:*:*:*:*:*:*:*1.45.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.46.0:*:*:*:*:*:*:*1.46.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.47.0:*:*:*:*:*:*:*1.47.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.48.0:*:*:*:*:*:*:*1.48.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.49.0:*:*:*:*:*:*:*1.49.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.50.0:*:*:*:*:*:*:*1.50.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.51.0:*:*:*:*:*:*:*1.51.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.52.0:*:*:*:*:*:*:*1.52.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.53.0:*:*:*:*:*:*:*1.53.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.54.0:*:*:*:*:*:*:*1.54.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.55.0:*:*:*:*:*:*:*1.55.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.56.0:*:*:*:*:*:*:*1.56.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.56.1:*:*:*:*:*:*:*1.56.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.56.2:*:*:*:*:*:*:*1.56.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.56.3:*:*:*:*:*:*:*1.56.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.56.4:*:*:*:*:*:*:*1.56.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.57.0:*:*:*:*:*:*:*1.57.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.58.0:*:*:*:*:*:*:*1.58.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.59.0:*:*:*:*:*:*:*1.59.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.60.0:*:*:*:*:*:*:*1.60.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.61.0:*:*:*:*:*:*:*1.61.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.62.0:*:*:*:*:*:*:*1.62.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.0:*:*:*:*:*:*:*1.63.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.1:*:*:*:*:*:*:*1.63.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.2:*:*:*:*:*:*:*1.63.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.3:*:*:*:*:*:*:*1.63.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.4:*:*:*:*:*:*:*1.63.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.63.5:*:*:*:*:*:*:*1.63.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.64.0:*:*:*:*:*:*:*1.64.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.64.2:*:*:*:*:*:*:*1.64.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.64.3:*:*:*:*:*:*:*1.64.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.64.4:*:*:*:*:*:*:*1.64.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.0:*:*:*:*:*:*:*1.65.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.1:*:*:*:*:*:*:*1.65.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.2:*:*:*:*:*:*:*1.65.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.3-10:*:*:*:*:*:*:*1.65.3-10Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.11:*:*:*:*:*:*:*1.65.11Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.12:*:*:*:*:*:*:*1.65.12Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.65.13:*:*:*:*:*:*:*1.65.13Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.66.0:*:*:*:*:*:*:*1.66.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.67.0:*:*:*:*:*:*:*1.67.0Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.67.1:*:*:*:*:*:*:*1.67.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.67.2:*:*:*:*:*:*:*1.67.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.68.1:*:*:*:*:*:*:*1.68.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.68.2:*:*:*:*:*:*:*1.68.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.69.1:*:*:*:*:*:*:*1.69.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.70.1:*:*:*:*:*:*:*1.70.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.71.1:*:*:*:*:*:*:*1.71.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.72.1:*:*:*:*:*:*:*1.72.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.72.3:*:*:*:*:*:*:*1.72.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.73.1:*:*:*:*:*:*:*1.73.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.1:*:*:*:*:*:*:*1.74.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.2-4:*:*:*:*:*:*:*1.74.2-4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.5:*:*:*:*:*:*:*1.74.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.6:*:*:*:*:*:*:*1.74.6Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.7:*:*:*:*:*:*:*1.74.7Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.8:*:*:*:*:*:*:*1.74.8Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.74.9:*:*:*:*:*:*:*1.74.9Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.75.1:*:*:*:*:*:*:*1.75.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.75.2:*:*:*:*:*:*:*1.75.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.75.3:*:*:*:*:*:*:*1.75.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.75.4:*:*:*:*:*:*:*1.75.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.75.5:*:*:*:*:*:*:*1.75.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.76.1:*:*:*:*:*:*:*1.76.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.76.2:*:*:*:*:*:*:*1.76.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.76.3:*:*:*:*:*:*:*1.76.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.76.4:*:*:*:*:*:*:*1.76.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.76.5:*:*:*:*:*:*:*1.76.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.77.1:*:*:*:*:*:*:*1.77.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.77.2:*:*:*:*:*:*:*1.77.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.77.3:*:*:*:*:*:*:*1.77.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.78.1:*:*:*:*:*:*:*1.78.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.78.3:*:*:*:*:*:*:*1.78.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.79.1:*:*:*:*:*:*:*1.79.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.79.2:*:*:*:*:*:*:*1.79.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.80.1:*:*:*:*:*:*:*1.80.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.81.1:*:*:*:*:*:*:*1.81.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.81.2:*:*:*:*:*:*:*1.81.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.81.3:*:*:*:*:*:*:*1.81.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.81.4:*:*:*:*:*:*:*1.81.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.81.5:*:*:*:*:*:*:*1.81.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.82.1:*:*:*:*:*:*:*1.82.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.83.1:*:*:*:*:*:*:*1.83.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.83.2:*:*:*:*:*:*:*1.83.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.84.1:*:*:*:*:*:*:*1.84.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.84.4:*:*:*:*:*:*:*1.84.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.85.1:*:*:*:*:*:*:*1.85.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.85.3:*:*:*:*:*:*:*1.85.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.86.1:*:*:*:*:*:*:*1.86.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.86.3:*:*:*:*:*:*:*1.86.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.87.1:*:*:*:*:*:*:*1.87.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.87.2:*:*:*:*:*:*:*1.87.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.87.3:*:*:*:*:*:*:*1.87.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.88.1:*:*:*:*:*:*:*1.88.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.89.1:*:*:*:*:*:*:*1.89.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.89.5:*:*:*:*:*:*:*1.89.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.90.1:*:*:*:*:*:*:*1.90.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.90.2:*:*:*:*:*:*:*1.90.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.90.4:*:*:*:*:*:*:*1.90.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.90.5:*:*:*:*:*:*:*1.90.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.90.6:*:*:*:*:*:*:*1.90.6Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.91.1:*:*:*:*:*:*:*1.91.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.91.2:*:*:*:*:*:*:*1.91.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.91.5:*:*:*:*:*:*:*1.91.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.91.6:*:*:*:*:*:*:*1.91.6Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.92.1:*:*:*:*:*:*:*1.92.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.93.1:*:*:*:*:*:*:*1.93.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.93.2:*:*:*:*:*:*:*1.93.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.1:*:*:*:*:*:*:*1.94.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.2:*:*:*:*:*:*:*1.94.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.3:*:*:*:*:*:*:*1.94.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.4:*:*:*:*:*:*:*1.94.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.5:*:*:*:*:*:*:*1.94.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.94.6:*:*:*:*:*:*:*1.94.6Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.95.1:*:*:*:*:*:*:*1.95.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.96.1:*:*:*:*:*:*:*1.96.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.96.2:*:*:*:*:*:*:*1.96.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.96.4:*:*:*:*:*:*:*1.96.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.97.1:*:*:*:*:*:*:*1.97.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.98.1:*:*:*:*:*:*:*1.98.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.98.2:*:*:*:*:*:*:*1.98.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.1:*:*:*:*:*:*:*1.99.1Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.2:*:*:*:*:*:*:*1.99.2Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.3:*:*:*:*:*:*:*1.99.3Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.4:*:*:*:*:*:*:*1.99.4Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.5:*:*:*:*:*:*:*1.99.5Vulnerableweb2py
cpe:2.3:a:web2py:web2py:1.99.7:*:*:*:*:*:*:*1.99.7Vulnerableweb2py
cpe:2.3:a:web2py:web2py:2.0.1-11:*:*:*:*:*:*:*2.0.1-11Vulnerableweb2py
cpe:2.3:a:web2py:web2py:2.1.0:*:*:*:*:*:*:*2.1.0Vulnerableweb2py
  • cpe:2.3:a:web2py:web2py:1.25.0:*:*:*:*:*:*:* Versions 1.25.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.26.0:*:*:*:*:*:*:* Versions 1.26.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.27.0:*:*:*:*:*:*:* Versions 1.27.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.28.0:*:*:*:*:*:*:* Versions 1.28.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.29.0:*:*:*:*:*:*:* Versions 1.29.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.30.0:*:*:*:*:*:*:* Versions 1.30.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.31.0:*:*:*:*:*:*:* Versions 1.31.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.40.0:*:*:*:*:*:*:* Versions 1.40.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.41.0:*:*:*:*:*:*:* Versions 1.41.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.42.0:*:*:*:*:*:*:* Versions 1.42.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.43.0:*:*:*:*:*:*:* Versions 1.43.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.44.0:*:*:*:*:*:*:* Versions 1.44.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.45.0:*:*:*:*:*:*:* Versions 1.45.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.46.0:*:*:*:*:*:*:* Versions 1.46.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.47.0:*:*:*:*:*:*:* Versions 1.47.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.48.0:*:*:*:*:*:*:* Versions 1.48.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.49.0:*:*:*:*:*:*:* Versions 1.49.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.50.0:*:*:*:*:*:*:* Versions 1.50.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.51.0:*:*:*:*:*:*:* Versions 1.51.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.52.0:*:*:*:*:*:*:* Versions 1.52.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.53.0:*:*:*:*:*:*:* Versions 1.53.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.54.0:*:*:*:*:*:*:* Versions 1.54.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.55.0:*:*:*:*:*:*:* Versions 1.55.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.56.0:*:*:*:*:*:*:* Versions 1.56.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.56.1:*:*:*:*:*:*:* Versions 1.56.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.56.2:*:*:*:*:*:*:* Versions 1.56.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.56.3:*:*:*:*:*:*:* Versions 1.56.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.56.4:*:*:*:*:*:*:* Versions 1.56.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.57.0:*:*:*:*:*:*:* Versions 1.57.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.58.0:*:*:*:*:*:*:* Versions 1.58.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.59.0:*:*:*:*:*:*:* Versions 1.59.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.60.0:*:*:*:*:*:*:* Versions 1.60.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.61.0:*:*:*:*:*:*:* Versions 1.61.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.62.0:*:*:*:*:*:*:* Versions 1.62.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.0:*:*:*:*:*:*:* Versions 1.63.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.1:*:*:*:*:*:*:* Versions 1.63.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.2:*:*:*:*:*:*:* Versions 1.63.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.3:*:*:*:*:*:*:* Versions 1.63.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.4:*:*:*:*:*:*:* Versions 1.63.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.63.5:*:*:*:*:*:*:* Versions 1.63.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.64.0:*:*:*:*:*:*:* Versions 1.64.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.64.2:*:*:*:*:*:*:* Versions 1.64.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.64.3:*:*:*:*:*:*:* Versions 1.64.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.64.4:*:*:*:*:*:*:* Versions 1.64.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.0:*:*:*:*:*:*:* Versions 1.65.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.1:*:*:*:*:*:*:* Versions 1.65.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.2:*:*:*:*:*:*:* Versions 1.65.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.3-10:*:*:*:*:*:*:* Versions 1.65.3-10 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.11:*:*:*:*:*:*:* Versions 1.65.11 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.12:*:*:*:*:*:*:* Versions 1.65.12 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.65.13:*:*:*:*:*:*:* Versions 1.65.13 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.66.0:*:*:*:*:*:*:* Versions 1.66.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.67.0:*:*:*:*:*:*:* Versions 1.67.0 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.67.1:*:*:*:*:*:*:* Versions 1.67.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.67.2:*:*:*:*:*:*:* Versions 1.67.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.68.1:*:*:*:*:*:*:* Versions 1.68.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.68.2:*:*:*:*:*:*:* Versions 1.68.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.69.1:*:*:*:*:*:*:* Versions 1.69.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.70.1:*:*:*:*:*:*:* Versions 1.70.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.71.1:*:*:*:*:*:*:* Versions 1.71.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.72.1:*:*:*:*:*:*:* Versions 1.72.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.72.3:*:*:*:*:*:*:* Versions 1.72.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.73.1:*:*:*:*:*:*:* Versions 1.73.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.1:*:*:*:*:*:*:* Versions 1.74.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.2-4:*:*:*:*:*:*:* Versions 1.74.2-4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.5:*:*:*:*:*:*:* Versions 1.74.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.6:*:*:*:*:*:*:* Versions 1.74.6 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.7:*:*:*:*:*:*:* Versions 1.74.7 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.8:*:*:*:*:*:*:* Versions 1.74.8 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.74.9:*:*:*:*:*:*:* Versions 1.74.9 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.75.1:*:*:*:*:*:*:* Versions 1.75.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.75.2:*:*:*:*:*:*:* Versions 1.75.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.75.3:*:*:*:*:*:*:* Versions 1.75.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.75.4:*:*:*:*:*:*:* Versions 1.75.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.75.5:*:*:*:*:*:*:* Versions 1.75.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.76.1:*:*:*:*:*:*:* Versions 1.76.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.76.2:*:*:*:*:*:*:* Versions 1.76.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.76.3:*:*:*:*:*:*:* Versions 1.76.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.76.4:*:*:*:*:*:*:* Versions 1.76.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.76.5:*:*:*:*:*:*:* Versions 1.76.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.77.1:*:*:*:*:*:*:* Versions 1.77.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.77.2:*:*:*:*:*:*:* Versions 1.77.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.77.3:*:*:*:*:*:*:* Versions 1.77.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.78.1:*:*:*:*:*:*:* Versions 1.78.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.78.3:*:*:*:*:*:*:* Versions 1.78.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.79.1:*:*:*:*:*:*:* Versions 1.79.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.79.2:*:*:*:*:*:*:* Versions 1.79.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.80.1:*:*:*:*:*:*:* Versions 1.80.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.81.1:*:*:*:*:*:*:* Versions 1.81.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.81.2:*:*:*:*:*:*:* Versions 1.81.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.81.3:*:*:*:*:*:*:* Versions 1.81.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.81.4:*:*:*:*:*:*:* Versions 1.81.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.81.5:*:*:*:*:*:*:* Versions 1.81.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.82.1:*:*:*:*:*:*:* Versions 1.82.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.83.1:*:*:*:*:*:*:* Versions 1.83.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.83.2:*:*:*:*:*:*:* Versions 1.83.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.84.1:*:*:*:*:*:*:* Versions 1.84.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.84.4:*:*:*:*:*:*:* Versions 1.84.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.85.1:*:*:*:*:*:*:* Versions 1.85.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.85.3:*:*:*:*:*:*:* Versions 1.85.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.86.1:*:*:*:*:*:*:* Versions 1.86.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.86.3:*:*:*:*:*:*:* Versions 1.86.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.87.1:*:*:*:*:*:*:* Versions 1.87.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.87.2:*:*:*:*:*:*:* Versions 1.87.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.87.3:*:*:*:*:*:*:* Versions 1.87.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.88.1:*:*:*:*:*:*:* Versions 1.88.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.89.1:*:*:*:*:*:*:* Versions 1.89.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.89.5:*:*:*:*:*:*:* Versions 1.89.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.90.1:*:*:*:*:*:*:* Versions 1.90.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.90.2:*:*:*:*:*:*:* Versions 1.90.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.90.4:*:*:*:*:*:*:* Versions 1.90.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.90.5:*:*:*:*:*:*:* Versions 1.90.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.90.6:*:*:*:*:*:*:* Versions 1.90.6 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.91.1:*:*:*:*:*:*:* Versions 1.91.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.91.2:*:*:*:*:*:*:* Versions 1.91.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.91.5:*:*:*:*:*:*:* Versions 1.91.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.91.6:*:*:*:*:*:*:* Versions 1.91.6 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.92.1:*:*:*:*:*:*:* Versions 1.92.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.93.1:*:*:*:*:*:*:* Versions 1.93.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.93.2:*:*:*:*:*:*:* Versions 1.93.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.1:*:*:*:*:*:*:* Versions 1.94.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.2:*:*:*:*:*:*:* Versions 1.94.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.3:*:*:*:*:*:*:* Versions 1.94.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.4:*:*:*:*:*:*:* Versions 1.94.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.5:*:*:*:*:*:*:* Versions 1.94.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.94.6:*:*:*:*:*:*:* Versions 1.94.6 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.95.1:*:*:*:*:*:*:* Versions 1.95.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.96.1:*:*:*:*:*:*:* Versions 1.96.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.96.2:*:*:*:*:*:*:* Versions 1.96.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.96.4:*:*:*:*:*:*:* Versions 1.96.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.97.1:*:*:*:*:*:*:* Versions 1.97.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.98.1:*:*:*:*:*:*:* Versions 1.98.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.98.2:*:*:*:*:*:*:* Versions 1.98.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.1:*:*:*:*:*:*:* Versions 1.99.1 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.2:*:*:*:*:*:*:* Versions 1.99.2 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.3:*:*:*:*:*:*:* Versions 1.99.3 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.4:*:*:*:*:*:*:* Versions 1.99.4 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.5:*:*:*:*:*:*:* Versions 1.99.5 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:1.99.7:*:*:*:*:*:*:* Versions 1.99.7 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:2.0.1-11:*:*:*:*:*:*:* Versions 2.0.1-11 Vulnerable ·web2py
  • cpe:2.3:a:web2py:web2py:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·web2py

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2311
  2. 2026-10-03 Alias added: GHSA-5wj6-jfcv-m6c3

References

Advisory 2

Other 1

  • TI-2023-24174 OS command injection in web2py CVSS 3.1CRITICAL 9.8
  • TI-2016-03363 The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to… CVSS 3.0CRITICAL 9.8
  • TI-2016-03359 The sample web application in web2py before 2.14.2 might allow remote attackers to… CVSS 3.0CRITICAL 9.8
  • TI-2016-08383 web2py before 2.14.6 does not properly check if a host is denied before verifying… CVSS 3.0CRITICAL 9.8
  • TI-2016-04151 Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability… CVSS 3.0HIGH 7.5
  • TI-2016-04153 Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery)… CVSS 3.0HIGH 8.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences