Read the docs
TI-2024-01154 Aliases CVE-2024-1240GHSA-3mmf-29wp-jc9p

Open Redirection in pyload/pyload

Priority MEDIUM 60CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-601.

Summary

An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00341 27th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed pyload/pyload (pyload): pyload-ng 0.5.0b3.dev79

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
pyloadpyload/pyloadbefore pyload-ng 0.5.0b3.dev79pyload-ng 0.5.0b3.dev79Patch availableCNA
  • pyload/pyload Vendorpyload Affected before pyload-ng 0.5.0b3.dev79 Fixed in pyload-ng 0.5.0b3.dev79 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pyload:pyload:0.5.0:*:*:*:*:*:*:*0.5.0Vulnerablepyload
  • cpe:2.3:a:pyload:pyload:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·pyload

Remediation

  • Fix · CNA pyload/pyload (pyload) Fixed in pyload-ng 0.5.0b3.dev79

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-1240
  2. 2026-10-03 Alias added: GHSA-3mmf-29wp-jc9p

References

Exploit 1

Patch 1

  • TI-2023-00282 Code Injection in pyload/pyload CVSS 3.1CRITICAL 9.8
  • TI-2023-00412 Excessive Attack Surface in pyload/pyload CVSS 3.1CRITICAL 9.8
  • TI-2026-26332 pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration CVSS 4.0CRITICAL 9.3
  • TI-2026-25907 pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad CVSS 4.0HIGH 8.8
  • TI-2024-32088 pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API CVSS 3.1CRITICAL 9.1
  • TI-2026-29761 pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass) CVSS 3.1HIGH 8.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences