Open Redirect in kalcaddle/kodexplorer

Valid

Reported on

Jun 20th 2021


✍️ Description

Open redirection via SVG file uplaod which redirects users to different site.

🕵️‍♂️ Proof of Concept

Steps to reproduce:
1. download and upload the file https://drive.google.com/file/d/1y_t4-5_lgFS7ZGJog1_uXAQ5rMxKGgVq/view?usp=sharing
2. View the file.

💥 Impact

This vulnerability is capable of redirect legitimate users to malicious websites.

Occurrences

We have contacted a member of the kalcaddle/kodexplorer team and are waiting to hear back a year ago
warlee
a year ago

Maintainer


same with https://www.huntr.dev/bounties/22-kalcaddle/KodExplorer/

warlee validated this vulnerability a year ago
x3rz has been awarded the disclosure bounty
The fix bounty is now up for grabs
warlee confirmed that a fix has been merged on 6d2521 a year ago
warlee has been awarded the fix bounty
to join this conversation