VULNERABILITY INTELLIGENCE

CVE-2025-10355

EPSS probability0.30%
CISA KEVNot currently listed
Published2025-10-23
Last modified2026-10-08

Description

Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.

Weakness classification

  • cve-coordination@incibe.es: CWE-601

Primary references