The vulnerability identified as CVE-2025-30885 affects Bit Apps Bit Form up to version 2.18.0. It is an Open Redirect issue where the application improperly handles URL redirection, enabling attackers to redirect users to malicious external websites. This can be leveraged in phishing campaigns to deceive users into visiting untrusted sites. The CVSS 3.1 base score is 4.7, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality. No patch or vendor advisory details are currently available.

Successful exploitation of this vulnerability can lead to users being redirected to malicious websites, increasing the risk of phishing attacks. The impact is limited to confidentiality as per the CVSS vector, with no direct integrity or availability impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should be cautious of suspicious URLs involving Bit Form and consider implementing external mitigations such as URL filtering or user awareness training to recognize phishing attempts.