CVE-2024-24808CWE-601

pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

Medium · published February 6, 2024

CVSS v3.1
4.7
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00545 · 45.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-02-06T03:17Z
EPSS history
Timeline
  • 06 FEB 03:17Z
    pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
    cvelistv5