1. Home
  2. CVE Database
  3. CVE-2024-24808
MEDIUM · 4.7

CVE-2024-24808

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is vali...

Vulnerability Description

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.

CVSS Score

4.7

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
PyloadPyload<= 0.5.0

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2024-24808?

CVE-2024-24808 is a vulnerability with a CVSS score of 4.7 (MEDIUM). pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is vali...

How severe is CVE-2024-24808?

CVE-2024-24808 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-24808?

Check the references section above for vendor advisories and patch information. Affected products include: Pyload Pyload.