Description
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Applications using Mendix 9 (All versions < V9.3.0). Write access checks of attributes of an object could be bypassed, if user has a write permissions to the first attribute of this object.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Mendix Applications using Mendix 7 | All versions < V7.23.22 | — |
| Siemens | Mendix Applications using Mendix 8 | All versions < V8.18.7 | — |
| Siemens | Mendix Applications using Mendix 9 | All versions < V9.3.0 | — |
Advisories 2
- ICSA-21-194-16 Siemens Mendix CISA ICS & IT advisories · May 6, 2025
- SSA-352521 SSA-352521: Access Check Bypass Vulnerability in Mendix Siemens ProductCERT · Jul 13, 2021