CVE-2022-34467

State: Published
Severity: Not scored
Published: Jul 12, 2022
Updated: Aug 3, 2024
Reserved: Jun 24, 2022

Description

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.

Scores

The record has no CVSS score.

Weaknesses

CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected Products

Product	Versions
Mendix Excel Importer Module (Mendix 8 compatible)Siemens	All versions < V9.2.2Affected
Mendix Excel Importer Module (Mendix 9 compatible)Siemens	All versions < V10.1.2Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-610768.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.