VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 15, 2024· Updated Nov 15, 2024

Open Redirection in pyload/pyload

CVE-2024-1240

Description

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Pyload/Pyloadllm-fuzzy2 versions
    <=0.5.0+ 1 more
    • (no CPE)range: <=0.5.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.