CVE-2025-34504 KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Attackers can redirect users to malicious sites after login via the link parameter in KodExplorer, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-34504?
CVE-2025-34504 is a medium-severity vulnerability in kodcloud KodExplorer, published on 11 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.
Weakness: CWE-601
Which versions are affected by CVE-2025-34504?
It affects 1 product.
Products include Kodcloud Kodexplorer.
How do I fix CVE-2025-34504?
No fix has been published for CVE-2025-34504 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-34504 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34504 exists.
Other vulnerabilities in kodcloud KodExplorer
- CVE-2022-46154 Arbitrary file access in KodExplorer
- CVE-2023-6850 kalcaddle KodExplorer API Endpoint unrestricted upload
- CVE-2023-6851 kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
- CVE-2023-6852 kalcaddle KodExplorer app.php server-side request forgery
- CVE-2023-6853 kalcaddle KodExplorer app.php index server-side request forgery
Sources
Also known as GHSA-cpc7-gw8m-x49f.