CVE-2021-42015

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.

• CWE-525

• https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdfPatch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdfPatch, Third Party Advisory

Published

Nov 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42009An authenticated Apache Traffic Control Traffic Ops user wit…4.3
• CVE-2021-4201Missing access control in ForgeRock Access Management 7.1.0 …9.8
• CVE-2021-42010Heron versions <= 0.20.4-incubating allows CRLF log injectio…9.8
• CVE-2021-42011An incorrect permission assignment vulnerability in Trend Mi…7.8
• CVE-2021-42012A stack-based buffer overflow vulnerability in Trend Micro A…7.8
• CVE-2021-42013It was found that the fix for CVE-2021-41773 in Apache HTTP …9.8
• CVE-2021-42016A vulnerability has been identified in RUGGEDCOM i800, RUGGE…7.5
• CVE-2021-42017A vulnerability has been identified in RUGGEDCOM i800, RUGGE…5.9
• CVE-2021-42018A vulnerability has been identified in RUGGEDCOM i800, RUGGE…5.9
• CVE-2021-42019A vulnerability has been identified in RUGGEDCOM i800, RUGGE…5.9
• CVE-2021-4202A use-after-free flaw was found in nci_request in net/nfc/nc…7
• CVE-2021-42020A vulnerability has been identified in RUGGEDCOM i800, RUGGE…7.5