CVE-2021-31339

A vulnerability has been identified in Mendix Excel Importer Module All versions V9.0.3. Uploading a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework...

CVE-2021-31339

CVE-2021-31339 affects the Mendix Excel Importer Module: all versions before 9.0.3 are vulnerable. Uploading a manipulated XML file can raise an exception that may disclose information about the application server and the XML framework. The issue is documented with CVSS v3 base score 4.3 (remote,...

Siemens Mendix Excel Importer Module

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mendix, a subsidiary of Siemens Equipment: Mendix Excel Importer Module Vulnerability: Generation of Error Message Containing Sensitive Information 2. RISK EVALUATION Successful exploitation of this...