PT-2021-13527 · Mulesoft · Mule

Published 2021-03-26 · Updated 2021-04-01 · CVE-2021-1627

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Mule versions 3.8.x through 4.x

Description: A Server Side Request Forgery issue affects certain versions of a Mule runtime component, potentially impacting both CloudHub and on-premise customers.

Recommendations: For versions 3.8.x, update to a version released after February 2, 2021. For versions 3.9.x, update to a version released after February 2, 2021. For versions 4.x, update to a version released after February 2, 2021.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2021-1627

Affected Products

Mule

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-1627 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1627 · Vendor Advisory
• https://help.salesforce.com/articleView?id=000357383&type=1&mode=1 · Vendor Advisory
• https://t.me/cvenotify/12078 · Telegram Post