| Package | Affected versions | Patched versions |
|---|---|---|
| web2py | < 2.14.6 | 2.14.6 |
| web2py | ≤ 2.14.5 |
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free