Security Advisory

CVE-2025-10355

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-23 11:16:30
Last updated 2025-10-23 14:31:10
Assigner INCIBE
State PUBLISHED

Description

Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.