CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.

Score
CVSS 3.1 7.5 High
Status
Modified - productcert@siemens.com
Published
2022-04-12
Last modified
2024-08-03
Weaknesses
CWE-200

Affected products

References

 
 
© AVABIS GmbH privacypolicy about