Technical impact
The vulnerability is an open redirect flaw that allows an attacker to redirect users to an untrusted site. When a user clicks a malicious link that passes a controlled redirect parameter, the system forwards the request without validating the target URL. This can be used to launch phishing attacks by tricking users into providing credentials or sensitive information on a spoofed site. The flaw is a classic example of CWE-601: URL Redirection to Untrusted Site.
Affected Systems
The affected product is Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc.'s Library Information and Document Automation Program. Vulnerable versions are from v22.1 up to, but not including, v22.2.
Risk and Exploitability
The CVSS score of 6.1 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV, suggesting current exploitation risk is uncertain. Based on the description, the likely attack vector requires an attacker to supply a crafted URL or embed the redirect in a link that users may click, making social engineering a primary factor in exploitation.
