5.9
Medium
CVE-2023-23835 A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications…
Description
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mendix Applications using Mendix 7 | Versions not published | |
| Mendix Applications using Mendix 8 | Versions not published | |
| Mendix Applications using Mendix 9 | Versions not published | |
| Mendix Applications using Mendix 9 (V9.12) | Versions not published | |
| Mendix Applications using Mendix 9 (V9.18) | Versions not published | |
| Mendix Applications using Mendix 9 (V9.6) | Versions not published |
Other CVEs of Mendix Applications using Mendix 7
The 9 CVEs of Mendix Applications using Mendix 7 →
CVE-2023-45794
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications…
6.8
Medium
CVE-2022-31257
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications…
Not rated
CVE-2022-27241
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications…
Not rated
CVE-2022-25650
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications…
Not rated