description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.
problem types: CWE-525: Use of Web Browser Cache Containing Sensitive Information
affected:
{
product: Mendix Applications using Mendix 7
vendor: Siemens
versions:
status: affected, version: All versions < V7.23.26
}
{
product: Mendix Applications using Mendix 8
vendor: Siemens
versions:
status: affected, version: All versions < V8.18.12
}
{
product: Mendix Applications using Mendix 9
vendor: Siemens
versions:
status: affected, version: All versions < V9.6.1
}
