CVE-2021-31339 Information disclosure in Mendix Excel Importer Module
Uploading a manipulated XML file exposes application server and XML framework information, requiring an upgrade to Mendix Excel Importer Module.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31339?
CVE-2021-31339 is a medium-severity vulnerability in Siemens Mendix Excel Importer Module, published on 12 May 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework.
Weakness: CWE-209
Which versions are affected by CVE-2021-31339?
It affects 1 product.
Products include Mendix Excel Importer.
How do I fix CVE-2021-31339?
No fix has been published for CVE-2021-31339 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31339 being exploited?
There is no known exploitation of CVE-2021-31339 in the wild and no public exploit code.
Other vulnerabilities in Siemens Mendix Excel Importer Module
Sources
Also known as GHSA-742c-94r3-qw76.