Summary
The latest update of Mendix Excel Importer module fixes an infomation disclosure vulnerability.
Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XM…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-854248.txt
-
SSA-854248: Information Disclosure Vulnerability in Mendix Excel Importer Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-854248.pdf
-
ICS Advisory ICSA-21-131-09 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-131-09
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B