Medium SSA-610768 1 CVE

SSA-610768: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module

Published Jul 12, 2022 · Updated Jul 12, 2022

Vendor: Siemens Product: Mendix Excel Importer Module (Mendix 8 compatible) Product: Mendix Excel Importer Module (Mendix 9 compatible)

Summary

The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability.

Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.

Vulnerabilities 1

Unscored —

CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mend…

Siemens Mendix Excel Importer Module (Mendix 8 compatible) Mendix Excel Importer Module (Mendix 9 compatible) ICS / OT

Jul 12, 2022

Revision history

2022-07-12 #1
Publication Date

References

SSA-610768: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-610768.pdf
SSA-610768: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-610768.txt