CVE-2016-4808

Name	CVE-2016-4808
Description	Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just by sending a URL to victim.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	856127

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
web2py	source	(unstable)	(unfixed)			856127

Notes

[jessie] - web2py <ignored> (Minor issue; issue in web admin interface which has no need to be used in production)
[wheezy] - web2py <no-dsa> (Minor issue; issue in web admin interface which has no need to be used in production)
https://github.com/web2py/web2py/issues/1585
https://github.com/web2py/web2py/commit/4bd002aee978813bc664cf186ef38ff4e8bbe1cd