Description (CNA)
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| M-Files Corporation / M-Files Mobile | affected 0 before 25.6.0 |
CWE
CWE-601
References
- https://product.m-files.com/security-advisories/cve-2025-2091
- https://empower.m-files.com/security-advisories/CVE-2025-2091
ADP enrichment
No English description supplied.
No references supplied.