CVE-2023-45794mediumCWE-294

CVE-2023-45794: fallo de gravedad media en Siemens Mendix Applications using Mendix 10

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Mendix Applications using Mendix

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.8epss 0.4%
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications using Mendix 7 (All versions < V7.23.37), Mendix Applications using Mendix 8 (All versions < V8.18.27), Mendix Applications using Mendix 9 (All versions < V9.24.10). A capture-replay flaw in the platform could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify objects without proper authorization, or escalate privileges in the context of the vulnerable app.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
Productos afectados
Siemens · Mendix Applications using Mendix 10Siemens · Mendix Applications using Mendix 7Siemens · Mendix Applications using Mendix 8Siemens · Mendix Applications using Mendix 9
CVEs relacionadas — Siemens Mendix Applications using Mendix 10

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-27394—CVE-2021-27394EPSS 1.4%CVE-2022-27241—CVE-2022-27241EPSS 1.4%CVE-2022-26317—CVE-2022-26317EPSS 1.0%CVE-2022-31257—CVE-2022-31257EPSS 0.8%CVE-2022-25650—CVE-2022-25650EPSS 0.7%CVE-2021-42025—CVE-2021-42025EPSS 0.6%