Description
MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.
Remediation
References
https://help.salesforce.com/articleView?id=000357384&type=1&mode=1
Related Vulnerabilities
CVE-2022-41235 Vulnerability in maven package org.jenkins-ci.plugins:wildfly-deployer
CVE-2021-21348 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2017-5662 Vulnerability in maven package org.eclipse.birt.runtime.3_7_1:org.apache.batik.dom
CVE-2020-11023 Vulnerability in maven package org.webjars.bower:jquery
CVE-2022-45384 Vulnerability in maven package org.jenkins-ci.plugins:reverse-proxy-auth-plugin