An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.
https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-03