Medium · 4.3 CVE-2025-35059 EUVD-2025-33568GHSA-cgm2-74fx-84hc

Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx

Published Oct 9, 2025 · Updated Oct 10, 2025 · Assigned by cisa-cg

Vendor: Newforma Product: Project Center

Description

Newforma Info Exchange (NIX) '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter.

Affected products

Vendor	Product	Affected	Fixed
Newforma	Project Center	< 2024.1	2024.1

Advisories 1

VA-25-282-01 Newforma Project Center multiple vulnerabilities CISA ICS & IT advisories · Oct 9, 2025

References

url
url