CVE-2025-34504

KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

Affected

kodcloud · KodExplorer

CVSS v4.0 VULNCHECK

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.32% chance of exploitation in the next 30 days, 24th percentile

Published

2025-12-11

Updated

2026-03-05

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/52245

Security advisories

• https://www.vulncheck.com/advisories/kodexplorer-open-redirect-vulnerability-via-user-log…
• kalcaddle/KodExplorer/releases/tag/4.52
• https://kodcloud.com

References

• CVE Record
• NVD entry