VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026

CVE-2024-1240

CVE-2024-1240

Description

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Pyload/Pyload3 versions
    cpe:2.3:a:pyload:pyload:0.5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:pyload:pyload:0.5.0:*:*:*:*:*:*:*
    • (no CPE)range: <=0.5.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.