CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

Sql injection

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

CVE-2022-34467

CVE-2022-34467 affects Siemens Mendix Excel Importer Module. The vulnerability is an XML Entity Expansion Injection in the Mendix Excel Importer Module (Mendix 8 compatible: all versions < v9.2.2; Mendix 9 compatible: all versions

CVE-2022-34467

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

Siemens Mendix Excel Importer

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix Excel Importer Module Vulnerability: XML Entity Expansion 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to compromise the...

PT-2022-22173

Name of the Vulnerable Software and Affected Versions Mendix Excel Importer Module Mendix 8 compatible versions prior to 9.2.2 Mendix Excel Importer Module Mendix 9 compatible versions prior to 10.1.2 Description A vulnerability has been identified that affects the availability of the Mendix Exce...

Siemens Mendix Excel Importer Module 安全漏洞

The Mendix Excel Importer Module can import Excel data tables into Mendix applications. an XML entity extension injection vulnerability exists in the Siemens Mendix Excel Importer Module, which can be exploited by an attacker to compromise the availability of affected components...

CVE-2022-34467: Improper Restriction of Recursive Entity References in DTDs

A vulnerability has been identified in Mendix Excel Importer Module Mendix 8 compatible All versions V9.2.2, Mendix Excel Importer Module Mendix 9 compatible All versions V10.1.2. The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Design/Logic Flaw

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40511

The CVE concerns OBDA systems Mastro 1.0, vulnerable to XML Entity Expansion (billion laughs) that enables denial of service. The root cause is XML entity expansion handling in Mastro 1.0, enabling resource exhaustion. Documented impact is a denial of service; no public exploit details or patch/v...

PT-2022-11249

Name of the Vulnerable Software and Affected Versions Mastro version 1.0 Description The issue allows for a denial of service through an XML Entity Expansion attack, also known as a "billion laughs" attack. Recommendations For Mastro version 1.0, consider disabling XML Entity Expansion to prevent...

CVE-2021-40511: Improper Restriction of Recursive Entity References in DTDs

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Siemens Mendix SAML Module

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix SAML Module Vulnerabilities: Improper Restriction of XML External Entity Reference, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities may...

OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...