CVE-2026-79318

MEDIUM CVSS 6.5 View on NVD ↗

Description

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/lichoin/TraceLoom/blob/main/CVEs/CVE-2026-79318.md
https://github.com/web2py/web2py

Published: Sep 21, 2026 20:17 UTC Modified: Sep 22, 2026 15:17 UTC