CVE-2025-34504

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-34504

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34504.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-34504

Published

2025-12-11T21:43:45.437Z

Modified

2026-07-08T08:10:22.431624982Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

Details

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34504.json",
    "cwe_ids": [
        "CWE-601"
    ],
    "cna_assigner": "VulnCheck"
}

References

Affected packages

Git / github.com/kalcaddle/kodexplorer

Affected ranges

Type

GIT

Repo

https://github.com/kalcaddle/kodexplorer

Events

Introduced

dfb3597ca4aabf662a0e5f860d4f420fb4e390a4

Fixed

dfb3597ca4aabf662a0e5f860d4f420fb4e390a4

Database specific

{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:kodcloud:kodexplorer:4.52:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.52"
        },
        {
            "last_affected": "4.52"
        }
    ]
}

Affected versions

4.*

4.52

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34504.json"