Headline
CVE-2023-25957
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All Versions >= 1.16.4 < 1.17.2), Mendix SAML (Mendix 8 compatible) (All versions >= 2.2.0 < 2.2.3), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= 3.1.9 < 3.2.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= 3.1.9 < 3.2.5). The affected versions of the module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application.
%PDF-1.5 %���� 60 0 obj << /Length 2347 /Filter /FlateDecode >> stream xڽZ[sۺ~���4S��_2mg���4N\K��N�yP$��D��T�����DR�L �y�E��r����[�4�Kh����������#Ns� &���j��b&�����4�������v��h�����L��b�c�-�Q�Nl��������r��o�]w�����ෳw����1P�&l��"F�d4?��’M��췄�l��{��QR��,�����I��8=�4�� �i%qFnE��� �1e)G���@���U�Z�jBL)�x��;Вm�]��%ᚵa�v��(LQV��:c�ߧ�|:���b ����5Q�5L�kOd��ء��0�eu"���Y���`�0q�� ¬jE��)��$WU�o��0[���� ���<$��� ���!’���h�;4 �%j��6Ď�t�$�%J�6"���h��g��_���� �K45’)��U����� �0��tq��L=��P&�A�9i|�.x4��,�ﭣo-�Ф��B��W�!f����v��� �X�;�rѣ��$J���T�i��a��j F)����l�k@�0�ki’]g�v-�e�[Fh��~? ��^�4���r� �:`�G��%�w� J6�7]�+9AK0�п�����*����nx’��D)�h��8�a��������` M�u <쯧�l3��R>��g?C�.W`�@ �i�!y!y’ �{JxvϺ0��å5�q�h���c��l�} ��f1��t�]U� �Z��N��