description: Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
problem types: Open Redirect
affected:
{
product: web2py
vendor: web2py
versions:
status: affected, version: versions prior to 2.22.5
}