Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02702
HistoryJan 13, 2023 - 12:00 a.m.

Siemens Mendix SAML Module Cross-Site Scripting Vulnerability (CNVD-2023-02702)

2023-01-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
siemens
mendix
saml
module
cross-site scripting
vulnerability
cloud applications
identity provider
sensitive information
attackers
exploited
malicious links

0.001 Low

EPSS

Percentile

30.6%

The Mendix SAML module uses SAML to authenticate users in cloud applications. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. A cross-site scripting vulnerability exists in Siemens Mendix SAML Module, which can be exploited by attackers to extract sensitive information by tricking users into visiting malicious links.

0.001 Low

EPSS

Percentile

30.6%

Related for CNVD-2023-02702