kodbox Authorization and Open Redirect Vulnerabilities

Improper authorization in KodBox 1.67 Build 02 allows unauthenticated remote attackers to bypass access controls via the msgWarning plugin endpoint, resulting in limited unauthorized access to confidential data. The CVSS 4.0 vector (PR:N/UI:N) confirms no authentication is required, and a public proof-of-concept exploit has been published on GitHub. The vendor did not respond to responsible disclosure, leaving no confirmed patch available at time of analysis.

Open redirect in kodbox 1.67 Build 02 SSO API Login allows unauthenticated remote attackers to redirect victims to arbitrary external URLs by manipulating the callbackUrl parameter at the /user/sso/apiLogin endpoint. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:P) confirms network-accessible, low-complexity exploitation requiring only passive user interaction - a victim clicking a crafted SSO link - with no authentication or special configuration needed from the attacker's side. A proof-of-concept exploit has been publicly disclosed on GitHub (E:P), lowering the exploitation barrier, though no CISA KEV listing indicates confirmed widespread exploitation at time of analysis.