The vulnerability in the visual integrated development environment for creating Mendix Studio Pro applications arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to write arbitrary files.

The vulnerability in the visual integrated development environment for creating Mendix Studio Pro applications is related to incorrect restrictions on the path to the restricted catalog during module installation. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...

PT-2025-25283

Name of the Vulnerable Software and Affected Versions Mendix Studio Pro versions prior to 8.18.35 Mendix Studio Pro versions prior to 9.24.35 Mendix Studio Pro versions prior to 10.6.24 Mendix Studio Pro versions prior to 10.12.17 Mendix Studio Pro versions prior to 10.18.7 Mendix Studio Pro...

Siemens Mendix Studio Pro

SUMMARY Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for several affected products and recommends to update...

Mendix Studio Pro 路径遍历漏洞

Mendix Studio Pro is a visual model-driven IDE from Mendix USA. A path traversal vulnerability exists in Mendix Studio Pro that originates from zip path traversal during module installation and could lead to arbitrary file writes or modifications. The following versions are affected: versions pri...

CVE-2025-40592: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...

Siemens Mendix Studio Pro

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2021-42015

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.26, Mendix Applications using Mendix 8 All versions V8.18.12, Mendix Applications using Mendix 9 All versions V9.6.1. Applications built with affected versions of Mendix Studio Pro do not prevent file...

Siemens Mendix Studio Pro

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Mendix Studio Pro Vulnerabilities: Incorrect Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated attackers to manipulate the content of specific...

CVE-2021-42025: Incorrect Authorization

A vulnerability has been identified in Mendix Applications using Mendix 8 All versions V8.18.13, Mendix Applications using Mendix 9 All versions V9.6.2. Applications built with affected versions of Mendix Studio Pro do not properly control write access for certain client actions. This could allow...