vulnerability
Ubuntu: USN-4030-1 (CVE-2016-3953): web2py vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Feb 6, 2018 | Jun 22, 2019 | Aug 18, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 6, 2018
Added
Jun 22, 2019
Modified
Aug 18, 2025
Description
The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function.
Solutions
ubuntu-upgrade-python-gluonubuntu-upgrade-python-web2py
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.