{"id":"CVE-2025-34504","state":"PUBLISHED","title":"KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint","description":"KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.","publishedAt":"2025-12-11T21:43:45.437Z","updatedAt":"2026-03-05T12:04:27.914Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["kodcloud KodExplorer"],"affected":[{"vendor":"kodcloud","product":"KodExplorer","defaultStatus":"unaffected","versions":[{"version":"4.52","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/52245","https://kodcloud.com/","https://github.com/kalcaddle/KodExplorer/releases/tag/4.52","https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint"],"weaknesses":["CWE-601"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/34xxx/CVE-2025-34504.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-34504","state":"PUBLISHED","datePublished":"2025-12-11T21:43:45.437Z","dateUpdated":"2026-03-05T12:04:27.914Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-04-15T19:15:22.611Z"},"containers":{"cna":{"title":"KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint","descriptions":[{"lang":"en","value":"KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication."}],"affected":[{"vendor":"kodcloud","product":"KodExplorer","defaultStatus":"unaffected","versions":[{"version":"4.52","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/52245","name":"ExploitDB-52245","tags":["exploit"]},{"url":"https://kodcloud.com/","name":"KodExplorer Homepage","tags":["product"]},{"url":"https://github.com/kalcaddle/KodExplorer/releases/tag/4.52","name":"KodExplorer Release Page","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-login-endpoint","name":"VulnCheck Advisory: KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-601","description":"CWE-601: URL Redirection to Untrusted Site ('Open Redirect')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-05T12:04:27.914Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kodcloud:kodexplorer:4.52:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","type":"finder","value":"Rahad Chowdhury"}],"datePublic":"2024-11-08T00:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-16T16:26:00.735446Z","id":"CVE-2025-34504","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-16T16:27:52.809Z"}}]}}}