CVE-2021-33718

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Applications using Mendix 9 (All versions < V9.3.0). Write access checks of attributes of an object could be bypassed, if user has a write permissions to the first attribute of this object.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.103

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-33718 are affected in Siemens Mendix 7.23.21	Windows
Vulnerabilities CVE-2021-33718 are affected in Siemens Mendix 8.18.6	Windows
Vulnerabilities CVE-2021-33718 are affected in Siemens Mendix 9.2.99	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234