This vulnerability (CVE-2025-24741) in LOGON's KB Support product involves an Open Redirect flaw that permits URL redirection to untrusted sites. It affects versions up to 1.6.7. The CVSS 3.1 score is 4.7 (medium severity), indicating network attack vector with low complexity, no privileges required, user interaction needed, and partial confidentiality impact. No official patch or mitigation guidance is currently provided, and no known exploits have been reported.

An attacker could exploit this vulnerability to redirect users to malicious websites, potentially facilitating phishing or social engineering attacks. However, the vulnerability does not impact integrity or availability, and the confidentiality impact is limited. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should be cautious with URLs received from untrusted sources and consider implementing URL validation or filtering at the application or network level if feasible.