CVE-2025-34504

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

CVSS 4.0

5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-25)

CWE

CWE-601

Published

2025-12-11

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• kodcloud:kodexplorer

References

• https://github.com/kalcaddle/KodExplorer/releases/tag/4.52
• https://kodcloud.com/
• https://www.exploit-db.com/exploits/52245
• https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint

Check your stackJSON