M-Files Mobile Open Redirection Vulnerability

A vulnerability allowing open redirection has been identified in M-Files mobile applications for Android and iOS, prior to version 25.6.0. This vulnerability allows attackers to use specially crafted PDF files to deceive users into clicking links that lead to untrusted URLs. The issue requires the attacker to be an authenticated user who can upload content to the vault, and it also necessitates user interaction from the victim.

Impact

Exploitation of this vulnerability could lead to open redirection, where users are tricked into visiting malicious websites, potentially causing harm or compromising their information.