Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-23835

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applicatio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Mendix Applications using Mendix 7

Default version status: unknown

  • All versions < V7.23.34affected

Siemens Mendix Applications using Mendix 8

Default version status: unknown

  • All versions < V8.18.23affected

Siemens Mendix Applications using Mendix 9

Default version status: unknown

  • All versions < V9.22.0affected

Siemens Mendix Applications using Mendix 9 (V9.12)

Default version status: unknown

  • All versions < V9.12.10affected

Siemens Mendix Applications using Mendix 9 (V9.18)

Default version status: unknown

  • All versions < V9.18.4affected

Siemens Mendix Applications using Mendix 9 (V9.6)

Default version status: unknown

  • All versions < V9.6.15affected

References