Skip to content
OpenAdvisories
High SSA-740594 2 CVEs

SSA-740594: Privilege Escalation Vulnerability in Mendix SAML Module

Published Jun 14, 2022 · Updated Jun 14, 2022

Vendor: Siemens Product: Mendix SAML Module (Mendix 7 compatible) Product: Mendix SAML Module (Mendix 8 compatible) Product: Mendix SAML Module (Mendix 9 compatible)

Summary

The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) attack allowing to execute malicious code by tricking users into accessing a malicious link .

Mendix has released an update for the Mendix SAML module and recommends to update to the latest version.

Vulnerabilities 2

Revision history

  1. #1

    Publication Date

References