| Package | Affected versions | Patched versions |
|---|---|---|
| org.mule.runtime:mule | ≥ 3.0.0, ≤ 4.1.5 | |
| mule runtime | ≥ 3.2.0, ≤ 3.9.3≥ 4.1.0, ≤ 4.2.1 |
Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway (all versions) released before August 1, 2019 allow remote attackers to read files accessible to the Mule process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free