This vulnerability involves an Open Redirect issue in the Manageable Email Sending System product from Pusula Communication Information Internet Industry and Trade Ltd. Co. Versions up to 2025.06 are affected. An attacker can exploit this flaw to redirect users to untrusted external URLs, potentially leveraging client trust to facilitate phishing or other social engineering attacks. The CVSS vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with partial confidentiality impact and no integrity or availability impact.

The vulnerability allows attackers to redirect users to untrusted websites, which could lead to phishing or social engineering attacks by exploiting user trust. There is no direct impact on data integrity or availability. Confidentiality impact is limited but present due to potential exposure through redirection.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, caution should be exercised when interacting with URLs generated by the affected system to avoid redirection to untrusted sites.