8.1
High
CVE-2022-46664 A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1…
Description
A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mendix Workflow Commons | Versions not published | |
| Mendix Workflow Commons V2.1 | Versions not published | |
| Mendix Workflow Commons V2.3 | Versions not published |