Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-10355 EUVD-2025-35674GHSA-7gpq-xm56-5fp3

Open redirection vulnerability in MOLGENIS EMX2

Published Oct 23, 2025 · Updated Oct 23, 2025 · Assigned by INCIBE

Description

Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.

Affected products

VendorProductAffectedFixed
MOLGENIS MOLGENIS EMX2 11.14.0 —

References