CVE-2025-34504CWE-601

CVE-2025-34504

Medium · published December 12, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.8th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-12-12T03:15Z
Affected products (1)
ProductVersionsFixed in
kodcloud/kodexplorerall versions—
References (4)
https://github.com/kalcaddle/KodExplorer/releases/tag/4.52 · [email protected]https://kodcloud.com/ · [email protected]https://www.exploit-db.com/exploits/52245 · [email protected]https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint · [email protected]
EPSS history
Timeline
  • 11 DEC 21:43Z
    KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
    cvelistv5