Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a completed Microflow execution call the affected framework does not correctly verify, if the request was initially made by the user requesting the result. Together with predictable identifiers for Microflow execution calls, this could allow a malicious attacker to retrieve information about arbitrary Microflow execution calls made by users within the affected system.
CVSS Information
N/A
Vulnerability Type
访问控制不恰当
Vulnerability Title
Siemens Mendix 安全特征问题特征问题漏洞
Vulnerability Description
Siemens Mendix是德国西门子（Siemens）公司的一套低代码应用程序开发平台。该平台提供应用程序开发、测试、部署和迭代等功能。 Mendix 7 存在安全特征问题漏洞，该漏洞源于在使用Mendix 7(所有版本< V7.23.29中，当返回一个完成的Microflow执行调用的结果时，如果请求最初是由请求结果的用户发出的，则受影响的框架不会正确地验证。攻击者可利用该漏洞检索有关受影响系统内用户进行的任意Microflow执行调用的信息。
CVSS Information
N/A
Vulnerability Type
N/A