CVE-2025-34504 MEDIUM

CVE-2025-34504: KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint

Vendor Kodcloud
Product KodExplorer
Weakness CWE-601 · Open redirect
Published December 11, 2025
Last update March 5, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.

Key dates

02Disclosure timeline

December 11, 2025 CVE published
March 5, 2026 Record updated