CVE-2022-34467: Medium severity mendix excel importer module vulnerability
A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-34467.
What is the affected software?
The affected software is Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2) and Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2).
What is the severity of CVE-2022-34467?
The severity of CVE-2022-34467 is medium with a CVSS score of 6.5.
What is the vulnerability description?
CVE-2022-34467 is a vulnerability in Mendix Excel Importer Module that allows XML Entity Expansion Injection, potentially leading to compromise.
How can I fix CVE-2022-34467?
To fix CVE-2022-34467, it is recommended to update to Mendix Excel Importer Module version 9.2.2 or later for Mendix 8 compatible versions, and version 10.1.2 or later for Mendix 9 compatible versions.