CVE-2025-34440 is an open redirect vulnerability in World Wide Broadcast Network's AVideo product. The issue arises from inadequate validation of the siteRedirectUri parameter during user registration in versions prior to 20.1. Exploiting this vulnerability, attackers can redirect users to arbitrary external sites, which may be used in phishing campaigns or other malicious activities. The vulnerability has a CVSS 4.8 (medium) score, indicating a moderate risk level. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation allows attackers to redirect users to untrusted external websites, increasing the risk of phishing attacks and user deception. The vulnerability does not directly compromise system integrity or confidentiality but can be leveraged as part of social engineering attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of unexpected redirects during user registration processes and consider implementing additional validation or monitoring on the siteRedirectUri parameter if possible.