description: A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.
problem types: CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
affected:
{
product: Mendix Excel Importer Module (Mendix 8 compatible)
vendor: Siemens
versions:
status: affected, version: All versions < V9.2.2
}
{
product: Mendix Excel Importer Module (Mendix 9 compatible)
vendor: Siemens
versions:
status: affected, version: All versions < V10.1.2
}
