Open Redirect in kalcaddle/kodexplorer

Valid

Reported on

Jun 20th 2021

✍️ Description

Open redirection via SVG file uplaod which redirects users to different site.

🕵️‍♂️ Proof of Concept

Steps to reproduce:
1. download and upload the file https://drive.google.com/file/d/1y_t4-5_lgFS7ZGJog1_uXAQ5rMxKGgVq/view?usp=sharing
2. View the file.

💥 Impact

This vulnerability is capable of redirect legitimate users to malicious websites.

Occurrences

util.js L1612

We have contacted a member of the kalcaddle/kodexplorer team and are waiting to hear back 2 years ago

warlee

commented 2 years ago

Maintainer

same with https://www.huntr.dev/bounties/22-kalcaddle/KodExplorer/

warlee validated this vulnerability 2 years ago

x3rz has been awarded the disclosure bounty

The fix bounty is now up for grabs

warlee marked this as fixed with commit 6d2521 2 years ago

warlee has been awarded the fix bounty

This vulnerability will not receive a CVE

to join this conversation