| Package | Affected versions | Patched versions |
|---|---|---|
| mendix | ≥ 7.0.2, < 7.23.34≥ 8.0.0, < 8.18.23≥ 9.0.0, < 9.6.15≥ 9.18.0, < 9.18.4≥ 9.19.0, < 9.22.0≥ 9.7.0, < 9.12.10 | 7.23.348.18.239.6.159.18.49.22.09.12.10 |
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free