This vulnerability in the browser-based Cisco Webex App arises from improper validation of URL parameters in HTTP requests, enabling an attacker to craft URLs that redirect users to untrusted, potentially malicious websites. Exploitation requires user interaction (clicking a crafted URL) but does not require authentication. Cisco has fixed this issue in the Webex App, and the vendor states no customer action is needed.

An attacker could redirect users to malicious websites, potentially leading to phishing or other social engineering attacks. The vulnerability does not impact confidentiality or availability but has a limited integrity impact due to the redirection. No known exploits are reported in the wild.

Cisco has addressed this vulnerability in the Cisco Webex App. According to the vendor advisory, no customer action is required as the fix has been applied.