VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-27241

CVE-2022-27241

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.

Affected products

7
  • Mendix/Mendix
    cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*
    Range: >=7.0.0,<9.11.0
  • Siemens Foundation/Mendix Applicationsllm-create
    Range: < V7.23.31, < V8.18.18, < V9.11, < V9.6.12
  • Mendix/Mendix Applicationsllm-fuzzy
    Range: < V7.23.31, < V8.18.18, < V9.11, < V9.6.12
  • Siemens/Mendix Applications using Mendix 7v5
    Range: All versions < V7.23.31
  • Siemens/Mendix Applications using Mendix 8v5
    Range: All versions < V8.18.18
  • Siemens/Mendix Applications using Mendix 9v5
    Range: All versions < V9.11
  • Siemens/Mendix Applications using Mendix 9 (V9.6)v5
    Range: All versions < V9.6.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.