PT-2020-19298 · Mulesoft · Mule

Published 2020-05-29 · Updated 2021-07-21 · CVE-2020-6937

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.8.x through 4.x released before April 7, 2020

Description A Denial of Service issue could allow remote attackers to submit data which can lead to resource exhaustion.

Recommendations For versions 3.8.x, 3.9.x, and 4.x released before April 7, 2020, update to a version released after April 7, 2020, to resolve the issue.

Fix

Related Identifiers

CVE-2020-6937

Affected Products

Mule

References · 4

• https://help.salesforce.com/articleView?id=000353701&language=en_US&type=1&mode=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6937 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6937 · Vendor Advisory
• https://t.me/cvenotify/4093 · Telegram Post