CVSS 3.1 Score 8.1 of 10 (high)


Published Nov 14, 2023
Updated: Dec 28, 2023
CWE ID 294


CVE-2023-45794 is a vulnerability that affects Mendix Applications using Mendix versions 10, 7, 8, and 9. The vulnerability arises from a capture-replay flaw in the platform and can potentially allow authenticated attackers to access or modify objects without proper authorization or escalate privileges within the vulnerable app. The risk score for this vulnerability is 25, with a base severity rating of HIGH. The exploitability score is 2.8. To remediate the vulnerability, organizations should ensure they update their Mendix applications to versions V10.4.0, V7.23.37, V8.18.27, or V9.24.10, which include the necessary patches to address the issue. Failure to mitigate this vulnerability could lead to significant impacts on confidentiality and integrity of data within the affected applications.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45794 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options