CVE-2021-31339: Medium severity mendix excel importer module vulnerability
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Mendix Excel Importer Module vulnerability?
The vulnerability ID of this Mendix Excel Importer Module vulnerability is CVE-2021-31339.
What is the description of CVE-2021-31339?
CVE-2021-31339 is a vulnerability in Mendix Excel Importer Module (All versions < V9.0.3) that allows uploading a manipulated XML File resulting in an exception and potential exposure of information about the Application-Server and the used XML-Framework.
What is the severity rating of CVE-2021-31339?
CVE-2021-31339 has a severity rating of 4.3, which is considered medium.
Which software versions are affected by CVE-2021-31339?
All versions of Mendix Excel Importer Module below V9.0.3 are affected by CVE-2021-31339.
How can CVE-2021-31339 be fixed?
To fix CVE-2021-31339, it is recommended to update Mendix Excel Importer Module to version 9.0.3 or above.