Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpc7-gw8m-x49f

Опубликовано: 12 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 6.1

Описание

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

EPSS

Процентиль: 53%
0.00303
Низкий

5.3 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
nvd
около 2 месяцев назад

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

EPSS

Процентиль: 53%
0.00303
Низкий

5.3 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-601