GHSA-cvcf-w75c-gw5r

ghsaUSosv

Mulesoft Mule Unsafe Deserialization

view advisory published 2022-05-24Licence: CC-BY-4.0

The MuleSoft Mule runtime engine before 3.8.0 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-13116US	critical9.8	5.13% (92nd)	—	2019-10-16
The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collectio…

references

External citations — patches, advisories, analysis.

https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notesWEB
https://github.com/mulesoft/mulePACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2019-13116ADVISORY
https://threat.tevora.com/mulesoft-3-8-unauthenticated-rceWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan