Medium SSA-252808 1 CVE

SSA-252808: XPath Constraint Vulnerability in Mendix Runtime

Published Feb 14, 2023 · Updated Feb 14, 2023

Vendor: Siemens Product: Mendix Applications using Mendix 7 Product: Mendix Applications using Mendix 8 Product: Mendix Applications using Mendix 9 Product: Mendix Applications using Mendix 9 (V9.12) Product: Mendix Applications using Mendix 9 (V9.18) Product: Mendix Applications using Mendix 9 (V9.6)

Summary

Mendix applications contain an improper access control vulnerability that could allow an attacker to bypass XPath constraints and retrieve information using XPath queries that trigger errors.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 5.9

CVE-2023-23835

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Feb 14, 2023

Revision history

2023-02-14 #1
Publication Date

References

SSA-252808: XPath Constraint Vulnerability in Mendix Runtime - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-252808.pdf
SSA-252808: XPath Constraint Vulnerability in Mendix Runtime - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-252808.txt