SSA-492173 V1.0: Expression Injection Vulnerability in Mendix Applications

Risk Summary

<p> An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix is used. </p> <p> Mendix has released updates for the affected product lines, recommends to update to the latest versions and to redeploy the applications. </p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)