This vulnerability is an open redirect in Ascertia SigningHub User v10.0 that allows attackers to craft URLs that redirect users to malicious destinations. The impact is primarily phishing or drive‑by attacks, potentially compromising user credentials or delivering malware. It represents a CWE‑601 misuse of redirection logic.

The affected product is Ascertia SigningHub User, specifically version 10.0 and also version 8.6.8 as indicated by the CPE entries. No other vendors or products are listed.

The CVSS score is 6.1, indicating medium severity, while the EPSS score is below 1%, suggesting low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to entice a user to click a maliciously crafted link; once the link is clicked, the user is redirected to a target site controlled by the attacker. The attack vector is remote via a crafted URL that the user follows.