6.1

CVE-2025-61166

Exploit
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AscertiaSigninghub Version8.6.8
AscertiaSigninghub Version10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.071
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://linkedin.com/in/thakur-nikhil
Not Applicable
https://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241
Third Party Advisory
Exploit