CVE-2025-10229 Freshwork logout redirect
Attackers can redirect users to malicious sites via the logout endpoint, potentially facilitating phishing attacks against Freshwork users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-10229?
CVE-2025-10229 is a medium-severity vulnerability in Freshwork, published on 10 Sep 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability has been found in Freshwork up to 1.2.3. This impacts an unknown function of the file /api/v2/logout. Such manipulation of the argument post_logout_redirect_uri leads to open redirect. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.2.3 will fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness: CWE-601
Which versions are affected by CVE-2025-10229?
How do I fix CVE-2025-10229?
No fix has been published for CVE-2025-10229 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-10229 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-10229 exists.
Sources
Also known as GHSA-7cm7-m385-h89r.