Siemens Mendix SAML Module
The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider.

This could allow a remote authenticated attacker to escalate privileges.