CVE-2024-24808

Summary

CVE-2024-24808 is a newly identified vulnerability affecting pyLoad, an open-source download manager written in Python. The issue stems from a lack of proper input validation during the `get_redirect_url` function, leading to an open redirect vulnerability. After a user logs into pyLoad, incorrectly validated URLs could redirect them to malicious websites, potentially exposing sensitive information. This vulnerability has been mitigated with the patch in commit fe94451.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.