Siemens Mendix

An attacker with network access to a Mendix application could extract sensitive data (user information, configuration details, business data) by crafting XPath queries designed to bypass access controls, potentially exposing operational or personal information stored in the application database.

Organizations running Siemens Mendix applications (versions 7, 8, or 9) for operational dashboards, data repositories, or control system interfaces should be concerned. This affects any Mendix application accessible over a network, including those used for monitoring industrial processes, managing plant data, or integrating with SCADA systems.

An attacker sends specially crafted XPath query requests to the Mendix application over the network. The application improperly validates or enforces access controls on these queries, allowing the attacker to bypass restrictions and retrieve data that should be protected. Error messages from failed XPath injection attempts may leak additional information about the data structure.