SSA-740594 V1.0: Privilege Escalation Vulnerability in Mendix SAML Module

Risk Summary

<p>The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) attack allowing to execute malicious code by tricking users into accessing a malicious link .</p> <p>Mendix has released an update for the Mendix SAML module and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)