CVE-2025-34504

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

CVSS v4.0

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.33% chance of exploitation in the next 30 days, 25th percentile

Published

2025-12-11

Updated

2026-03-05

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/52245

References

• CVE Record
• NVD entry

Related

• CVE-2025-34503
• CVE-2025-34506
• CVE-2025-34502
• CVE-2025-34508
• CVE-2025-34501
• CVE-2025-34509