Not rated
CVE-2022-31257 A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications…
Description
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.2), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). In case of access to an active user session in an application that is built with an affected version, it’s possible to change that user’s password bypassing password validations within a Mendix application. This could allow to set weak passwords.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mendix Applications using Mendix 7 | Versions not published | |
| Mendix Applications using Mendix 8 | Versions not published | |
| Mendix Applications using Mendix 9 | Versions not published | |
| Mendix Applications using Mendix 9 (V9.12) | Versions not published | |
| Mendix Applications using Mendix 9 (V9.6) | Versions not published |
Other CVEs of Mendix Applications using Mendix 7
The 9 CVEs of Mendix Applications using Mendix 7 →
CVE-2023-45794
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications…
6.8
Medium
CVE-2023-23835
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications…
5.9
Medium
CVE-2022-27241
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications…
Not rated
CVE-2022-25650
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications…
Not rated