CVE-2022-24309

A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNewQueryHandler* set to False). If an entity has an association readable by the user, then in some cases, Mendix Runtime may not apply checks for XPath constraints that parse said associations, within apps running on affected versions. A malicious user could use this to dump and manipulate sensitive data.

• CWE-284

• https://cert-portal.siemens.com/productcert/html/ssa-148641.htmlVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-148641.pdfMitigation, Release Notes, Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-148641.htmlVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-148641.pdfMitigation, Release Notes, Vendor Advisory

Published

Mar 8, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24303Pillow before 9.0.1 allows attackers to delete files because…9.1
• CVE-2022-24304Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-24305Zoho ManageEngine SharePoint Manager Plus before 4329 is vul…9.8
• CVE-2022-24306Zoho ManageEngine SharePoint Manager Plus before 4329 allows…9.8
• CVE-2022-24307Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect a…9.8
• CVE-2022-24308Automox Agent prior to version 37 on Windows and Linux and V…5.5
• CVE-2022-2431The Download Manager plugin for WordPress is vulnerable to a…8.8
• CVE-2022-24310A CWE-190: Integer Overflow or Wraparound vulnerability exis…9.8
• CVE-2022-24311A CWE-22: Improper Limitation of a Pathname to a Restricted …9.8
• CVE-2022-24312A CWE-22: Improper Limitation of a Pathname to a Restricted …9.8
• CVE-2022-24313A CWE-120: Buffer Copy without Checking Size of Input vulner…9.8
• CVE-2022-24314A CWE-125: Out-of-bounds Read vulnerability exists that coul…7.5