ByteOS Network

NVD Vulnerability Details :

CVE-2024-24808

Analyzed

Source-security-advisories@github.com

Published At-06 Feb, 2024 | 04:15

Updated At-13 Feb, 2024 | 22:48

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Secondary	3.1	4.7	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

CPE Matches

pyload>>pyload>>Versions up to 0.5.0(inclusive)

cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-601	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd	security-advisories@github.com	Patch
https://github.com/pyload/pyload/security/advisories/GHSA-g3cm-qg2v-2hj5	security-advisories@github.com	Exploit Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History