CVE-2022-27241

Name of the Vulnerable Software and Affected Versions Mendix versions prior to 7.23.31 Mendix versions prior to 8.18.18 Mendix versions prior to 9.11 Mendix version 9.6 versions prior to 9.6.12

Description The issue is related to insufficient protection of internal data in the Mendix platform, which can allow a remote attacker to disclose the structure of a created project. This could enable an unauthenticated remote attacker to read confidential information. Applications built with an affected system publicly expose the internal project structure.

Recommendations For Mendix versions prior to 7.23.31, update to version 7.23.31 or later. For Mendix versions prior to 8.18.18, update to version 8.18.18 or later. For Mendix versions prior to 9.11, update to version 9.11 or later. For Mendix version 9.6 versions prior to 9.6.12, update to version 9.6.12 or later.