pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.
Advisories
Source ID Title
EUVD EUVD EUVD-2024-0635 pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.
Github GHSA Github GHSA GHSA-g3cm-qg2v-2hj5 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 09 May 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-05-09T16:31:14.196Z

Reserved: 2024-01-31T16:28:17.941Z

Link: CVE-2024-24808

cve-icon Vulnrichment

Updated: 2024-08-01T23:28:12.795Z

cve-icon NVD

Status : Modified

Published: 2024-02-06T04:15:08.260

Modified: 2024-11-21T08:59:45.443

Link: CVE-2024-24808

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.