A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mendix | Mendix | * | 7.23.26 (excluding) |
| Mendix | Mendix | 8.0.0 (including) | 8.18.12 (excluding) |
| Mendix | Mendix | 9.0.0 (including) | 9.6.1 (excluding) |