CVE-2017-2166

CVE-2017-2166 describes an open redirect vulnerability in GroupSession version 4.7.0 and earlier. This flaw allows an attacker to redirect users to arbitrary malicious websites, facilitating phishing attacks. The vulnerability has a CVSS score of 6.1 (Medium), indicating it can be exploited remotely with low complexity, requiring user interaction, and potentially leading to information disclosure and integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.