CVE-2021-31339: Mendix Excel Importer

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework.

Affected products

• Mendix Excel Importer: before 9.0.3 (fixed in 9.0.3)

Published 2021-05-12. Last modified 2026-06-17.