VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 14, 2022· Updated Jun 17, 2026

CVE-2022-32285

CVE-2022-32285

Description

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). The affected module is vulnerable to XML External Entity (XXE) attacks due to insufficient input sanitation. This may allow an attacker to disclose confidential data under certain circumstances.

Affected products

5
  • Mendix/SAML
    cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*
    Range: <1.16.6
  • Mendix/SAML Modulellm-fuzzy
    Range: < V1.16.6, < V2.2.2, < V3.2.3
  • Siemens Foundation/Mendix SAMLcpe-rescue3 versions
    All versions < V1.16.6+ 2 more
    • (no CPE)range: All versions < V1.16.6
    • (no CPE)range: All versions < V2.2.2
    • (no CPE)range: All versions < V3.2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.