CVE-2021-33712: Mendix SAML

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

Affected products

• Mendix SAML: before 2.1.2 (fixed in 2.1.2)

Published 2021-06-08. Last modified 2026-06-17.