What’s Vulnerable › Vulnerabilities

CVE-2024-24808: pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-02-06 · updated 2026-06-17
• Weakness: CWE-601

Description

pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability has been patched with commit fe94451.

Affected products

• pyload/pyload: through 0.5.0

References

• https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd
• https://github.com/pyload/pyload/security/advisories/GHSA-g3cm-qg2v-2hj5
• https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd
• https://github.com/pyload/pyload/security/advisories/GHSA-g3cm-qg2v-2hj5

Get alerted when CVE-2024-24808 or the next vulnerability affects your stack