| Package | Affected versions | Patched versions |
|---|---|---|
| web2py | ≤ 2.24.1 |
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free