VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 16, 2021· Updated Jun 17, 2026

CVE-2021-27394

CVE-2021-27394

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges.

Affected products

7
  • Mendix/Mendix
    cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*
    Range: >=7.0.2,<7.23.19
  • Mendix/Mendix Applicationsllm-fuzzy
    Range: < V7.23.19, < V8.17.0, < V8.12.5, < V8.6.9, < V9.0.5
  • Siemens/Mendix Applications using Mendix 7v5
    Range: All versions < V7.23.19
  • Siemens/Mendix Applications using Mendix 8v5
    Range: All versions < V8.17.0
  • Siemens/Mendix Applications using Mendix 8 (V8.12)v5
    Range: All versions < V8.12.5
  • Siemens/Mendix Applications using Mendix 8 (V8.6)v5
    Range: All versions < V8.6.9
  • Siemens/Mendix Applications using Mendix 9v5
    Range: All versions < V9.0.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.