CVE-2023-29129

Summary

CVE-2023-29129 is a vulnerability affecting multiple versions of Mendix SAML for various Mendix releases, including Mendix 7, 8, 9, and 9.12/9.18. The issue lies in the insufficient verification of SAML assertions, potentially enabling unauthenticated remote attackers to bypass authentication and gain unauthorized access to applications using these affected versions. An earlier fix for CVE-2023-25957 was not completely addressed in these specific non-default configurations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.