Description
MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Versions affected: Mule 4.1.x and 4.2.x runtime released before February 2, 2021.
Remediation
References
https://help.salesforce.com/articleView?id=000357382&type=1&mode=1
Related Vulnerabilities
CVE-2018-12541 Vulnerability in maven package io.vertx:vertx-core
CVE-2017-7661 Vulnerability in maven package org.apache.cxf.fediz:fediz-jetty8
CVE-2019-10307 Vulnerability in maven package org.jvnet.hudson.plugins:analysis-core
CVE-2013-4517 Vulnerability in maven package org.apache.santuario:xmlsec
CVE-2017-2582 Vulnerability in maven package org.keycloak:keycloak-saml-core