Critical SSA-134279 2 CVEs

SSA-134279: Vulnerability in Mendix Forgot Password Appstore module

Published Mar 8, 2022 · Updated Mar 8, 2022

Vendor: Siemens Product: Mendix Forgot Password Appstore module Product: Mendix Forgot Password Appstore module (Mendix 7 compatible)

Summary

Mendix Forgot Password Appstore module contains two vulnerabilities that could allow unauthorized users to take over accounts.

Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.

Vulnerabilities 2

Unscored —

CVE-2022-26313

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In cer…

Siemens Mendix Forgot Password Appstore module ICS / OT

Mar 8, 2022
Unscored —

CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix…

Siemens Mendix Forgot Password Appstore module Mendix Forgot Password Appstore module (Mendix 7 compatible) ICS / OT

Mar 8, 2022

Revision history

2022-03-08 #1
Publication Date

References

SSA-134279: Vulnerability in Mendix Forgot Password Appstore module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-134279.pdf
SSA-134279: Vulnerability in Mendix Forgot Password Appstore module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-134279.txt