CVE-2022-34467CWE-776

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9…

published July 12, 2022

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00774 · 55.3th percentile
Weakness
CWE-776 · Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Published
2022-07-12T10:07Z
EPSS history
Timeline
  • 12 JUL 10:07Z
    A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9…
    cvelistv5