The vulnerability identified as CVE-2025-1885 is an Open Redirect issue in the Restajet Online Food Delivery System. It allows an attacker to craft URLs that redirect users to untrusted external websites. This can be leveraged for phishing or to bypass access controls via forceful browsing. The affected versions include all versions up to 19122025. The vendor has not responded to disclosure attempts, and no patch or fix has been published. The CVSS score of 5.4 reflects a medium impact with network attack vector, low attack complexity, requiring privileges and user interaction, and causing limited integrity and availability impacts.

The vulnerability enables attackers to redirect users to malicious sites, increasing the risk of phishing attacks and unauthorized access attempts through forceful browsing. There is no direct confidentiality impact reported. The integrity and availability impacts are limited but present. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users and administrators should exercise caution with URLs from the affected system and consider implementing web application firewall rules or URL filtering to detect and block suspicious redirects. Monitor for updates from the vendor for an official fix.