{"id":9438,"date":"2025-10-21T09:45:00","date_gmt":"2025-10-21T07:45:00","guid":{"rendered":"https:\/\/the-s-unit.nl\/?page_id=9438"},"modified":"2025-10-21T09:45:02","modified_gmt":"2025-10-21T07:45:02","slug":"tsu-04-insecure-published-integrations","status":"publish","type":"page","link":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/","title":{"rendered":"TSU-04: Insecure Published Integrations"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"9438\" class=\"elementor elementor-9438\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-aaa94ad elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"aaa94ad\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0427a99\" data-id=\"0427a99\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-434b2fe elementor-widget elementor-widget-heading\" data-id=\"434b2fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The S-Unit Top 10<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ea8deb elementor-widget elementor-widget-image\" data-id=\"8ea8deb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-300x300.png\" class=\"attachment-medium size-medium wp-image-9440\" alt=\"TSU-04: Insecure Published Integrations\" srcset=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-300x300.png 300w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-1024x1024.png 1024w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-150x150.png 150w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-768x768.png 768w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-500x500.png 500w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-12x12.png 12w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-600x600.png 600w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4-100x100.png 100w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-4.png 1080w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ceb434 elementor-widget elementor-widget-heading\" data-id=\"3ceb434\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">TSU-04: Insecure published integrations<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9f2f3bf elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9f2f3bf\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0f4929c\" data-id=\"0f4929c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b7ea66a elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b7ea66a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">TSU-04 focuses on insecurely configured or implemented Published Integrations.\nEnsure that authentication, authorization, and validation are applied consistently, and that only trusted systems have access. This prevents your API integrations from becoming the weak spot of your Mendix app.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a67f268 elementor-widget elementor-widget-spacer\" data-id=\"a67f268\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-07f0866 elementor-widget elementor-widget-heading\" data-id=\"07f0866\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Published integrations: a key link and a potential target<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-03657df elementor-widget elementor-widget-text-editor\" data-id=\"03657df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">Published Integrations are the main way Mendix exposes <strong>microflows<\/strong>  and <strong>entities<\/strong> to external systems through standard API formats such as <strong>SOAP<\/strong>, <strong>REST<\/strong>, or <strong>OData<\/strong>. They act as the bridge between your Mendix app and other services.<\/p><p>Typical use cases include:<\/p><ul><li>Providing data interaction for internal applications<\/li><li>Exchanging information with (semi-)trusted third-party systems<\/li><li>Acting as service endpoints within Single Sign-On (SSO) solutions <strong>Single Sign-On<\/strong>-oplossingen.<\/li><\/ul><p>Because these integrations often serve trusted systems, they frequently handle sensitive data and sometimes rely on custom authentication or authorization mechanisms.\nIf a Published Integration is configured or implemented incorrectly, it can result in unauthorized access to data or functionality, or allow external parties to bypass intended restrictions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d429f18 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d429f18\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bde79ee\" data-id=\"bde79ee\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-492a61b elementor-widget elementor-widget-heading\" data-id=\"492a61b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Reduce risks by designing your microflows smartly and securely.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acdef05 elementor-widget elementor-widget-text-editor\" data-id=\"acdef05\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">To prevent TSU-04 vulnerabilities, ensure that only trusted systems can access your integrations.\nLimit privileges at two levels:<\/p><ol><li>On the integration level (allowed roles)<\/li><li>On the level of individual microflows or entities exposed through the integration<\/li><\/ol><p>\u00a0<\/p><p>Follow these best practices:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7d54948 premium-type-column elementor-widget elementor-widget-premium-icon-list\" data-id=\"7d54948\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;rbadges_repeater&quot;:[]}\" data-widget_type=\"premium-icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<ul class=\"premium-bullet-list-box\">\n\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-f2ae3bd\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Gebruik geen \u2018no authentication\u2019-optie, tenzij alle bewerkingen volledig openbaar zijn.\">Avoid using the \u201cno authentication\u201d option unless every operation truly exposes public data or functionality.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-3abd4b8\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Geef integratietoegang nooit aan module roles die ook aan gewone gebruikers zijn gekoppeld. Gebruik aparte integration-accounts met eigen module roles.\">Do not assign integration access to module roles used by regular users. Use dedicated integration accounts with specific module roles.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-8ceb117\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Vermijd zelfgemaakte authenticatie. Gebruik liever de standaard Mendix-authenticatie met sterke, willekeurig gegenereerde wachtwoorden.\">Avoid building your own authentication logic. Use the built-in Mendix password authentication with strong, randomly generated passwords.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-1ecc7b4\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Als maatwerk nodig is, kies dan een geteste en onderhouden Marketplace-module in plaats van eigen code.\">If custom authentication is necessary, choose an actively maintained and security-tested Marketplace module rather than developing your own.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-19f1c18\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Gebruik bij maatwerk de optie \u201ccustom authentication\u201d in plaats van \u2018no authentication\u2019 met losse checks per operatie. Zo blijft authenticatie uniform en consistent.\">When using custom authentication, select the \u201ccustom authentication\u201d option instead of combining \u201cno authentication\u201d with per-operation checks. This ensures consistency and reliability<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-186ffb8\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Als een integratie meerdere \u2018allowed roles\u2019 bevat (bijvoorbeeld voor partners met verschillende vertrouwensniveaus), geef dan per microflow alleen toegang aan de rol die het echt nodig heeft. Vermijd dat alle rollen overal worden herhaald.\">If an integration includes multiple allowed roles (for example, for partners with varying trust levels), grant each microflow access only to the role that truly requires it. Avoid duplicating all roles across every operation.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-6c9002d\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-eye\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Gebruik bij Import Mappings geen directe koppeling van gebruikersinvoer aan persistente entiteiten. Dit kan leiden tot datalekken of datamanipulatie. Map eerst naar non-persistent entiteiten, valideer de relevante attributen en voer daarna pas updates of creaties uit.\">When using Import Mappings to process user input, make sure they cannot violate data restrictions. Do not map input directly to persistent entities. This may cause data exposure or manipulation. Instead, map to non-persistent entities, validate attributes, and only then interact with persistent data.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b501365 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b501365\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dbef240\" data-id=\"dbef240\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9943f5e elementor-widget elementor-widget-heading\" data-id=\"9943f5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities within TSU-04<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a8545a2 elementor-widget elementor-widget-text-editor\" data-id=\"a8545a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The following vulnerabilities commonly occur within this category:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc9a17c premium-type-column elementor-widget elementor-widget-premium-icon-list\" data-id=\"fc9a17c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;rbadges_repeater&quot;:[]}\" data-widget_type=\"premium-icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<ul class=\"premium-bullet-list-box\">\n\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-a242583\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Ontbrekende authenticatie bij gevoelige integratie: externe partijen krijgen directe toegang tot vertrouwelijke gegevens.\">Missing authentication on sensitive integrations: external parties gain access to confidential data.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-e31d72a\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Gebruikerstoegang tot integratie-endpoints: gewone gebruikers kunnen API\u2019s aanroepen die alleen voor systemen bedoeld zijn.\">User access to integration endpoints: regular users can call APIs meant only for systems.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-4719d80\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Onjuiste module role gekoppeld aan operation-microflow: leidt tot te ruime rechten.\">Incorrect module role assigned to an operation microflow: resulting in excessive privileges.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-454fb3c\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Onveilige maatwerk-authenticatie: zelfgeschreven authenticatieprocessen missen vaak robuuste validatie of logging.\">Insecure custom authentication microflows: self-built authentication logic often lacks proper validation or logging.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-71cbb8e\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Datamanipulatie via import mapping: invoer wordt zonder controle direct opgeslagen of gewijzigd.\">Data manipulation through import mapping: unvalidated input is stored or altered directly.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-1bff9b4\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw far fa-comment-dots\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Direct object reference in import mapping: gebruikers kunnen object-ID\u2019s manipuleren en ongeoorloofde data benaderen.\">Direct object references in import mapping: users can manipulate object IDs to access unauthorized data.<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6bd960f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6bd960f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-57d706d\" data-id=\"57d706d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d817b4f elementor-widget elementor-widget-heading\" data-id=\"d817b4f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Integrate The S-Unit Top 10 into your CI\/CD pipeline.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c0273f4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c0273f4\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-31aa2aa\" data-id=\"31aa2aa\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-816ed96 elementor-widget elementor-widget-text-editor\" data-id=\"816ed96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">Want to know how your Mendix application scores on The S-Unit Top 10?\nIn collaboration with Omnext, we\u2019ve developed a Mendix-specific SAST solution that continuously and automatically scans for vulnerabilities. By integrating The S-Unit Top 10 into the CI\/CD pipeline, risks are detected early and made immediately visible.\nFor questions, feel free to contact us.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>The S-Unit Top 10 TSU-04: Insecure published integrations TSU-04 richt zich op onveilig ingerichte of ge\u00efmplementeerde Published Integrations.Zorg dat authenticatie, autorisatie en validatie consequent zijn toegepast en dat alleen vertrouwde systemen toegang hebben. Zo voorkom je dat API-integraties het zwakke punt van je Mendix-app worden. Published integrations: een belangrijk schakel element en doelwit Published Integrations [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-9438","page","type-page","status-publish","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"The S-Unit \u2013 Your Security Companion\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"TSU-04: Insecure Published Integrations \u2013 The S-Unit\" \/>\n\t\t<meta property=\"og:description\" content=\"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-10-21T07:45:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-10-21T07:45:02+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"TSU-04: Insecure Published Integrations \u2013 The S-Unit\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/the-s-unit.nl\\\/en\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#listItem\",\"name\":\"TSU-04: Insecure Published Integrations\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#listItem\",\"position\":2,\"name\":\"TSU-04: Insecure Published Integrations\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#organization\",\"name\":\"The S-Unit\",\"description\":\"Your Security Companion\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/\",\"telephone\":\"+31302074177\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/logo-simple.svg\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-s-unit\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#webpage\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/\",\"name\":\"TSU-04: Insecure Published Integrations \\u2013 The S-Unit\",\"description\":\"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\\u2019s.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-04-insecure-published-integrations\\\/#breadcrumblist\"},\"datePublished\":\"2025-10-21T09:45:00+02:00\",\"dateModified\":\"2025-10-21T09:45:02+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/\",\"name\":\"The S-Unit\",\"description\":\"Your Security Companion\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"TSU-04: Insecure Published Integrations \u2013 The S-Unit","description":"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.","canonical_url":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en#listItem","position":1,"name":"Home","item":"https:\/\/the-s-unit.nl\/en","nextItem":{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#listItem","name":"TSU-04: Insecure Published Integrations"}},{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#listItem","position":2,"name":"TSU-04: Insecure Published Integrations","previousItem":{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/the-s-unit.nl\/en\/#organization","name":"The S-Unit","description":"Your Security Companion","url":"https:\/\/the-s-unit.nl\/en\/","telephone":"+31302074177","logo":{"@type":"ImageObject","url":"\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#organizationLogo"},"image":{"@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#organizationLogo"},"sameAs":["https:\/\/www.linkedin.com\/company\/the-s-unit"]},{"@type":"WebPage","@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#webpage","url":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/","name":"TSU-04: Insecure Published Integrations \u2013 The S-Unit","description":"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/the-s-unit.nl\/en\/#website"},"breadcrumb":{"@id":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/#breadcrumblist"},"datePublished":"2025-10-21T09:45:00+02:00","dateModified":"2025-10-21T09:45:02+02:00"},{"@type":"WebSite","@id":"https:\/\/the-s-unit.nl\/en\/#website","url":"https:\/\/the-s-unit.nl\/en\/","name":"The S-Unit","description":"Your Security Companion","inLanguage":"en-GB","publisher":{"@id":"https:\/\/the-s-unit.nl\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"The S-Unit \u2013 Your Security Companion","og:type":"article","og:title":"TSU-04: Insecure Published Integrations \u2013 The S-Unit","og:description":"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.","og:url":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/","og:image":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","og:image:secure_url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","article:published_time":"2025-10-21T07:45:00+00:00","article:modified_time":"2025-10-21T07:45:02+00:00","twitter:card":"summary_large_image","twitter:title":"TSU-04: Insecure Published Integrations \u2013 The S-Unit","twitter:description":"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.","twitter:image":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg"},"aioseo_meta_data":{"post_id":"9438","title":null,"description":"Ontdek hoe Insecure Published Integrations leiden tot kwetsbaarheden in Mendix. Leer van praktijkvoorbeelden en volg best practices voor veilige API\u2019s.","keywords":null,"keyphrases":{"focus":{"keyphrase":"Insecure Published Integrations","score":69,"analysis":{"keyphraseInTitle":{"score":9,"maxScore":9,"error":0},"keyphraseInDescription":{"score":9,"maxScore":9,"error":0},"keyphraseLength":{"score":9,"maxScore":9,"error":0,"length":3},"keyphraseInURL":{"score":5,"maxScore":5,"error":0},"keyphraseInIntroduction":{"score":3,"maxScore":9,"error":1},"keyphraseInSubHeadings":{"score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":{"score":9,"maxScore":9,"error":0},"keywordDensity":{"score":0,"type":"low","maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2025-10-17 09:16:26","updated":"2025-10-21 07:56:03","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/the-s-unit.nl\/en\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tTSU-04: Insecure Published Integrations\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/the-s-unit.nl\/en"},{"label":"TSU-04: Insecure Published Integrations","link":"https:\/\/the-s-unit.nl\/en\/tsu-04-insecure-published-integrations\/"}],"_links":{"self":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/comments?post=9438"}],"version-history":[{"count":8,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9438\/revisions"}],"predecessor-version":[{"id":9478,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9438\/revisions\/9478"}],"wp:attachment":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/media?parent=9438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}