Skip to content
Not rated

CVE-2021-27394 A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications…

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges.

Affected products and versions

Product Affected versions Fixed in
Mendix Applications using Mendix 7 Versions not published
Mendix Applications using Mendix 8 Versions not published
Mendix Applications using Mendix 8 (V8.12) Versions not published
Mendix Applications using Mendix 8 (V8.6) Versions not published
Mendix Applications using Mendix 9 Versions not published
The 9 CVEs of Mendix Applications using Mendix 7 →
Track this CVE