| Package | Affected versions | Patched versions |
|---|---|---|
| web2py | < 2.14.1 | 2.14.1 |
web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free