CVE-2016-4808

CVE-2016-4808 describes a Cross-Site Request Forgery (CSRF) vulnerability in Web2py versions 2.14.5 and below. An attacker could exploit this by tricking a logged-in user into performing unintended actions, such as disabling an installed application, simply by sending them a malicious URL. This vulnerability carries a high CVSSv3 score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit modules, an exploit is available on ExploitDB, and community discussion and media coverage are minimal.