CVE-2025-34504

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - disclosure@vulncheck.com

Published

2025-12-11

Last modified

2026-10-07

Weaknesses

CWE-601

Affected products

• Kodexplorer (Kodcloud)

References

• https://www.exploit-db.com/exploits/52245
• https://kodcloud.com/
• https://github.com/kalcaddle/KodExplorer/releases/tag/4.52
• https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint