Byaidu PDFMathTranslate Open Redirect Vulnerability

A vulnerability allowing open redirects has been identified in Byaidu PDFMathTranslate version 1.9.9. This issue arises in the application’s /gradio_api endpoint, where the file parameter is not properly validated. As a result, attackers can craft URLs that redirect users to arbitrary external websites. This vulnerability could be exploited for phishing attacks or to bypass security filters.

Impact

Exploitation of this vulnerability could lead to open redirect behavior, allowing for phishing attacks or evasion of security measures.

Reproduction

To reproduce this vulnerability, send a request to the /gradio_api endpoint with a crafted URL in the file parameter. The application will respond with an HTTP 302 redirect to the specified URL, demonstrating the open redirect behavior.