CVE-2025-34504

MediumCVSS 6.1

Published: 11/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs to redirect users to arbitrary external websites after authentication.

Risk Assessment

Risk of phishing and credential theft, as users may be redirected to malicious sites.

Recommendation

Update KodExplorer to the latest version. Validate and restrict the link parameter to allowed URLs.

Other vulnerabilities in KodExplorer

CVE-2023-37153Medium
KodExplorer version 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field.

Original NVD description (English source)

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS