CVE-2025-35052 | Newforma Project Center 2024.3 download.aspx qs hard-coded key

October 9, 2025 Yanac

A vulnerability, which was classified as problematic, was found in Newforma Project Center 2024.3. This impacts an unknown function of the file /DownloadWeb/download.aspx. The manipulation of the argument qs results in use of hard-coded cryptographic key
.

This vulnerability was named CVE-2025-35052. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More