CVE-2025-34504: KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34504?
CVE-2025-34504 is classified as a high severity open redirect vulnerability.
How does CVE-2025-34504 impact users?
CVE-2025-34504 allows attackers to redirect users to malicious websites after authentication, potentially leading to phishing attacks.
How do I fix CVE-2025-34504?
To fix CVE-2025-34504, ensure that user input is properly validated and sanitize the 'link' parameter before using it.
Which versions of KodExplorer are affected by CVE-2025-34504?
CVE-2025-34504 affects KodExplorer version 4.52 and possibly earlier versions.
What measures can be taken to mitigate CVE-2025-34504?
Mitigation for CVE-2025-34504 includes implementing strict input validation and redirect whitelisting to prevent unauthorized redirects.