This vulnerability (CWE-601) involves an open redirect flaw in Deepen Bajracharya Video Conferencing with Zoom, versions up to 4.4.4. An attacker can exploit this by sending a specially crafted URL that causes the application to redirect users to an untrusted external site. The CVSS 3.1 base score is 4.7, reflecting network attack vector, low complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality with no impact on integrity or availability.

Successful exploitation could lead to users being redirected to malicious websites, potentially facilitating phishing attacks or other social engineering exploits. However, the vulnerability does not directly compromise confidentiality, integrity, or availability of the application itself. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should exercise caution when clicking on links within the affected application and verify URLs before following redirects. No official mitigation or temporary fix is currently documented.