CVE-2016-4807: XSS
Published Jan 11, 2017
·Updated
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
Affected Software
2 affected components
Web2py Web2py<=2.14.5
pip/web2py<=2.14.5
Event History
Jan 11, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·03:05 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-4807?
CVE-2016-4807 is classified as a high severity vulnerability due to its potential for enabling XSS attacks on logged-in users.
2
How do I fix CVE-2016-4807?
To mitigate CVE-2016-4807, update Web2py to version 2.14.6 or higher.
3
Who is affected by CVE-2016-4807?
CVE-2016-4807 affects Web2py versions 2.14.5 and below.
4
What type of vulnerability is CVE-2016-4807?
CVE-2016-4807 is a Reflected Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2016-4807 be exploited remotely?
Yes, CVE-2016-4807 can be exploited remotely by an attacker targeting an admin logged into the application.