CVE-2025-10355

Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.

Score

CVSS 4.0 5.1 Medium

Status

Deferred - cve-coordination@incibe.es

Published

2025-10-23

Last modified

2026-10-08

Weaknesses

CWE-601

Affected products

• Molgenis Emx2 (Molgenis)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/open-redirection-vulnerability-molgenis-emx2