Description
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Mendix Applications using Mendix 7 | All versions < V7.23.31 | — |
| Siemens | Mendix Applications using Mendix 8 | All versions < V8.18.18 | — |
| Siemens | Mendix Applications using Mendix 9 | All versions < V9.11 | — |
| Siemens | Mendix Applications using Mendix 9 (V9.6) | All versions < V9.6.12 | — |
Advisories 2
- ICSA-22-104-07 Siemens Mendix CISA ICS & IT advisories · Jul 12, 2022
- SSA-414513 SSA-414513: Information Disclosure Vulnerability in Mendix Siemens ProductCERT · Jul 12, 2022