← Database

CVE-2022-27241

HIGH CVSS: 7.5 Published: 2022-04-12 Modified: 2026-06-17

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.

Affected Platforms

Mendix Mendix

Weakness Type

CWE-200, CWE-200

References