CVE-2025-7702 Open Redirect in PUSULA's Manageable Email Sending System
An open redirect vulnerability allows attackers to redirect users to untrusted sites, potentially facilitating phishing attacks against users of the email system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-7702?
CVE-2025-7702 is a medium-severity vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System, published on 19 Sep 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client.
This issue affects Manageable Email Sending System: from <=2025.06 before 2025.08.06.
Weakness: CWE-601
Which versions are affected by CVE-2025-7702?
How do I fix CVE-2025-7702?
No fix has been published for CVE-2025-7702 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-7702 being exploited?
There is no known exploitation of CVE-2025-7702 in the wild and no public exploit code.
Sources
Also known as GHSA-7h64-gqv5-v79f.