CVE-2023-29129

CVE-2023-29129 is a critical authentication bypass vulnerability affecting various versions of the Mendix SAML module across Mendix 7, 8, and 9 platforms. This flaw stems from insufficient verification of SAML assertions, allowing unauthenticated remote attackers to gain unauthorized access to applications. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions and media coverage, indicating awareness and potential for future exploitation.