{"id":"CVE-2025-7702","state":"PUBLISHED","title":"Open Redirect in PUSULA's Manageable Email Sending System","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client.\n\nThis issue affects Manageable Email Sending System: from <=2025.06 before 2025.08.06.","publishedAt":"2025-09-19T07:58:32.331Z","updatedAt":"2026-06-05T13:42:24.999Z","severity":{"score":4.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","source":"TR-CERT"},"assigner":"TR-CERT","products":["Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System"],"affected":[{"vendor":"Pusula Communication Information Internet Industry and Trade Ltd. Co.","product":"Manageable Email Sending System","defaultStatus":"unaffected","versions":[{"version":"<=2025.06","status":"affected","lessThan":"2025.08.06","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-25-0274","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0274"],"weaknesses":["CWE-601"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/7xxx/CVE-2025-7702.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-7702","state":"PUBLISHED","datePublished":"2025-09-19T07:58:32.331Z","dateUpdated":"2026-06-05T13:42:24.999Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-07-16T08:56:49.137Z"},"containers":{"cna":{"title":"Open Redirect in PUSULA's Manageable Email Sending System","descriptions":[{"lang":"en","value":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client.\n\nThis issue affects Manageable Email Sending System: from <=2025.06 before 2025.08.06."}],"affected":[{"vendor":"Pusula Communication Information Internet Industry and Trade Ltd. Co.","product":"Manageable Email Sending System","defaultStatus":"unaffected","versions":[{"version":"<=2025.06","status":"affected","lessThan":"2025.08.06","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0274","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0274","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.7,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-601","lang":"en","description":"CWE-601 URL Redirection to Untrusted Site ('Open Redirect')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-05T13:42:24.999Z"},"datePublic":"2025-09-19T07:50:00.000Z","impacts":[{"capecId":"CAPEC-22","descriptions":[{"lang":"en","value":"CAPEC-22 Exploiting Trust in Client"}]}],"credits":[{"lang":"en","value":"Emre DOĞAN","type":"finder"}],"source":{"defect":["TR-25-0274"],"advisory":"TR-25-0274","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-19T11:52:20.481930Z","id":"CVE-2025-7702","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-19T11:53:02.860Z"}}]}}}