PT-2025-50766 · Unknown · Kodexplorer

Rahad Chowdhury · Published 2025-12-11 · Updated 2025-12-12 · CVE-2025-34504

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions KodExplorer version 4.52

Description KodExplorer 4.52 contains an open redirect issue in the user login page. Attackers can manipulate the link parameter to redirect users to arbitrary external websites after authentication. The vulnerable endpoint is the user login page. The link parameter is susceptible to manipulation.

Recommendations Apply a fix to sanitize the link parameter on the user login page to prevent redirection to arbitrary external websites.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-34504

Affected Products

Kodexplorer

References · 7

• 🔥 https://exploit-db.com/exploits/52245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34504 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34504 · Vendor Advisory
• https://github.com/kalcaddle/KodExplorer/releases/tag/4.52 · Note
• https://t.me/CVEtracker/39545 · Telegram Post
• https://vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint · Note
• https://kodcloud.com · Note