CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

• CWE-345

• https://cert-portal.siemens.com/productcert/pdf/ssa-522654.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-522654.pdfThird Party Advisory

Published

Jun 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33706Due to improper input validation in InfraBox, logs can be mo…4.3
• CVE-2021-33707SAP NetWeaver Knowledge Management allows remote attackers t…6.1
• CVE-2021-33708Due to insufficient input validation in Kyma, authenticated …8.8
• CVE-2021-33709A vulnerability has been identified in Teamcenter Active Wor…4.3
• CVE-2021-33710A vulnerability has been identified in Teamcenter Active Wor…6.1
• CVE-2021-33711A vulnerability has been identified in Teamcenter Active Wor…5.3
• CVE-2021-33713A vulnerability has been identified in JT Utilities (All ver…5.5
• CVE-2021-33714A vulnerability has been identified in JT Utilities (All ver…5.5
• CVE-2021-33715A vulnerability has been identified in JT Utilities (All ver…5.5
• CVE-2021-33716A vulnerability has been identified in SIMATIC CP 1543-1 (in…6.5
• CVE-2021-33717A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2021-33718A vulnerability has been identified in Mendix Applications u…5.3