CVE-2022-32285CWE-611

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All…

published June 14, 2022

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). The affected module is vulnerable to XML External Entity (XXE) attacks due to insufficient input sanitation. This may allow an attacker to disclose confidential data under certain circumstances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01026 · 63.3th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2022-06-14T09:22Z
EPSS history
Timeline
  • 14 JUN 09:22Z
    A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All…
    cvelistv5