DivvyDrive Open Redirect via Parameter Injection

URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Parameter Injection. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.

Casky was already ahead

This CVE exploits attack patterns that Casky's 301matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

DivvyDrive versions 4.8.2.9 through 4.8.3.1 contain a critical open redirect vulnerability (CWE-601) that allows attackers to inject malicious parameters and redirect users to untrusted external sites. This vulnerability has a CVSS score of 9.6, reflecting its severity. Open redirects are particularly dangerous because they're frequently leveraged in phishing campaigns—attackers craft legitimate-looking URLs pointing to trusted DivvyDrive instances, but the redirect parameter silently sends users to attacker-controlled domains to steal credentials or distribute malware. Organizations using affected DivvyDrive versions face immediate risk, especially those where users rely on the application for file sharing and collaboration.

Casky's 301 mapped skills detect the attack patterns underlying this vulnerability by analyzing both initial access (TA0001) and reconnaissance (TA0043) techniques through Claude's extended reasoning capabilities. When a practitioner runs detections, they'll identify suspicious parameter patterns—such as unusual URL encoding in redirect parameters, domain whitelisting bypasses, and HTTP header manipulation attempts that characterize open redirect exploitation. The skills correlate these findings with known phishing infrastructure reconnaissance and credential harvesting behaviors, providing practitioners with contextual alerts that reveal not just the technical flaw, but the attacker's likely intent. Findings will highlight parameter injection points and recommend immediate patching to version 4.8.3.2 or later, along with WAF rules to block suspicious redirect parameters at the network boundary.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

301 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-6795.

analyzing-apt-group-with-mitre-navigator

threat intelligence · low

Run

analyzing-campaign-attribution-evidence

threat intelligence · low

Run

analyzing-certificate-transparency-for-phishing

threat intelligence · low

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2026-6795

Casky has 301 skills that investigate the attack patterns behind CVE-2026-6795. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn