Description
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Mendix Forgot Password Appstore module | All versions >= V3.3.0 < V3.5.1 | — |
Advisories 2
- ICSA-22-069-04 Siemens SINEMA Mendix Forgot Password Appstore CISA ICS & IT advisories · May 6, 2025
- SSA-134279 SSA-134279: Vulnerability in Mendix Forgot Password Appstore module Siemens ProductCERT · Mar 8, 2022