{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-61166", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-04-06T19:31:38.527Z", "dateReserved": "2025-09-26T00:00:00.000Z", "datePublished": "2026-04-06T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-06T17:13:42.365Z"}, "descriptions": [{"lang": "en", "value": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://linkedin.com/in/thakur-nikhil"}, {"url": "https://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-601", "lang": "en", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-06T19:30:53.616812Z", "id": "CVE-2025-61166", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T19:31:38.527Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-61166", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-06T19:30:53.616812Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T19:29:36.282Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://linkedin.com/in/thakur-nikhil"}, {"url": "https://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241"}], "descriptions": [{"lang": "en", "value": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-04-06T17:13:42.365Z"}}}, "cveMetadata": {"cveId": "CVE-2025-61166", "state": "PUBLISHED", "dateUpdated": "2026-04-06T19:31:38.527Z", "dateReserved": "2025-09-26T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-04-06T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL."}], "id": "CVE-2025-61166", "lastModified": "2026-04-06T20:16:21.097", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-04-06T18:16:41.070", "references": [{"source": "cve@mitre.org", "url": "https://linkedin.com/in/thakur-nikhil"}, {"source": "cve@mitre.org", "url": "https://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,10.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "signinghub_user", "vendor": "ascertia"}], "analysis": {"en": {"generated_at": "2026-04-07T01:24:29.380925+00:00", "value": {"mitigation_remediation": ["Check whether your environment uses Ascertia SigningHub User v10.0 and confirm the installed version.", "If a vendor update or patch is available, apply it immediately to remove the redirect logic or restrict allowed target URLs.", "In the absence of an official fix, consider disabling or blocking the redirect endpoint identified in the application or implementing a defensive redirect filter that allows only whitelisted domains.", "Monitor for traffic patterns consistent with open\u2011redirect exploitation, such as unexpected external link requests originating from your application.", "Document any temporary mitigations and plan for future patch deployment when the vendor releases an update."], "summary": {"action": "Assess Impact", "impact": "User redirection to malicious site via crafted URL"}, "threat_synthesis": {"affected_systems": "The affected product is Ascertia SigningHub User, specifically the v10.0 release. No other versions are listed, and vendor or patch information is currently unavailable.", "description_and_impact": "An open redirect vulnerability exists in Ascertia SigningHub User version 10.0. The flaw allows an attacker to construct a specially crafted URL that, when accessed by an end\u2011user, redirects them to an arbitrary external site of the attacker\u2019s choice. This type of weakness falls under CWE\u2011601 and can be leveraged to facilitate phishing attacks or to deliver other forms of social\u2011engineering exploits. The impact is primarily on confidentiality of user intent and integrity of the browsing experience, and can lead to credential theft or malware installation if the victim engages with the malicious site.", "risk_and_exploitability": "The CVSS score is 6.1, indicating a moderate severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote, relying on a victim clicking a maliciously crafted link; no additional system access is required for the redirect to occur."}}}}, "created": "2026-04-06T21:47:40.812626+00:00", "updated": "2026-04-07T09:39:41.489010+00:00", "vendors": ["ascertia", "ascertia$PRODUCT$signinghub_user"]}