Description
MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.
Remediation
References
https://help.salesforce.com/articleView?id=000357384&type=1&mode=1
Related Vulnerabilities
CVE-2016-4468 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa
CVE-2017-5653 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-xml
CVE-2013-4330 Vulnerability in maven package org.apache.camel:camel-core
CVE-2020-1947 Vulnerability in maven package org.apache.shardingsphere:shardingsphere
CVE-2020-7011 Vulnerability in npm package @elastic/app-search-node