CVE-2021-31339

Reference Links

• https://cert-portal.siemens.com/productcert/pdf/ssa-854248.pdf
• https://us-cert.cisa.gov/ics/advisories/icsa-21-131-09
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-131-09 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-21-131-09

Frequently Asked Questions

• What is the vulnerability ID of this Mendix Excel Importer Module vulnerability?

  The vulnerability ID of this Mendix Excel Importer Module vulnerability is CVE-2021-31339.

• What is the description of CVE-2021-31339?

  CVE-2021-31339 is a vulnerability in Mendix Excel Importer Module (All versions < V9.0.3) that allows uploading a manipulated XML File resulting in an exception and potential exposure of information about the Application-Server and the used XML-Framework.

• What is the severity rating of CVE-2021-31339?

  CVE-2021-31339 has a severity rating of 4.3, which is considered medium.

• Which software versions are affected by CVE-2021-31339?

  All versions of Mendix Excel Importer Module below V9.0.3 are affected by CVE-2021-31339.

• How can CVE-2021-31339 be fixed?

  To fix CVE-2021-31339, it is recommended to update Mendix Excel Importer Module to version 9.0.3 or above.