VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 14, 2022· Updated Jun 17, 2026

CVE-2022-32286

CVE-2022-32286

Description

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). In certain configurations SAML module is vulnerable to Cross Site Scripting (XSS) attacks due to insufficient error message sanitation. This could allow an attacker to execute malicious code by tricking users into accessing a malicious link.

Affected products

5
  • Mendix/SAML
    cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*
    Range: <1.16.6
  • Mendix/SAML Modulellm-fuzzy
    Range: < V1.16.6, < V2.2.2, < V3.2.3
  • Siemens Foundation/Mendix SAMLcpe-rescue3 versions
    All versions < V1.16.6+ 2 more
    • (no CPE)range: All versions < V1.16.6
    • (no CPE)range: All versions < V2.2.2
    • (no CPE)range: All versions < V3.2.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.