CVE-2022-34467: Mendix Excel Importer

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.

Affected products

• Mendix Excel Importer: before 9.2.2 (fixed in 9.2.2); from 10.0.0, before 10.1.2 (fixed in 10.1.2)

Published 2022-07-12. Last modified 2026-06-17.