Open Redirect in Molgenis Emx2
CVE-2025-10355
Open redirection vulnerability in MOLGENIS EMX2 v11.14.0. This vulnerability allows an attacker to create a malicious URL using a manipulated redirection parameter, potentially leading users to phishing sites or other malicious destinations via “/%2f%2f<MALICIOUS_DOMAIN>”.
Vulnerability class: Open Redirect
EPSS: 0.003 (20.7th percentile) — read the EPSS interpretation.
Affected products
- Molgenis Emx2 — versions 11.14.0