I believe web2py/gluon/shell.py", line 238 should use os.path.*abspath*
instead of *absdir*?
Unpacked and ran a clean version of web2py:
command: python web2py.py -B -S welcome -M
web2py Web Framework
Created by Massimo Di Pierro, Copyright 2007-2023
Version 2.25.1-stable+timestamp.2023.10.08.1
Hello everybody,
A new version of web2py, 2.25.1, is out.
It contains some bug fixes, #2468 #2468 #2236, http headers sanitization,
and fixes this vulenarbility https://jvn.jp/en/jp/JVN80476432/ (to be
published soon).
The vulnerabily does not affect most users. It is only in the optional
Me
2 matches
Mail list logo
