This vulnerability involves an Open Redirect issue in vTiger CRM v7.4.0 where the page parameter can be manipulated to redirect users to arbitrary external sites. The CVSS vector indicates it is remotely exploitable without privileges, requires user interaction, and impacts confidentiality and integrity. No vendor advisory or patch information is available, and no exploits have been reported in the wild.

Successful exploitation can lead to users being redirected to malicious sites, potentially facilitating phishing attacks or other social engineering. The impact affects confidentiality and integrity but does not cause denial of service or system compromise directly.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users and administrators should be cautious with URLs containing the page parameter and consider implementing URL validation or filtering at the application or proxy level to prevent open redirects.