← All advisories

Medium severity5.3NVD Advisory· Published Sep 10, 2019· Updated Jun 17, 2026

CVE-2019-12996

CVE-2019-12996

Description

In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe.

Affected products

3

Mendix/Mendix2 versions
cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*range: <=7.23.5
- (no CPE)range: <=7.23.5
Mendix/Mendixdescription

Patches

Vulnerability mechanics

References

1

docs.mendix.com/releasenotes/studio-pro/7.23nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.