Description
MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.
Remediation
References
https://help.salesforce.com/articleView?id=000357384&type=1&mode=1
Related Vulnerabilities
CVE-2023-49276 Vulnerability in npm package uptime-kuma
CVE-2021-21366 Vulnerability in npm package xmldom
CVE-2023-31065 Vulnerability in maven package org.apache.inlong:manager-web
CVE-2020-11990 Vulnerability in npm package cordova-plugin-camera
CVE-2021-41182 Vulnerability in maven package org.webjars.bower:jquery-ui