Critical severityNVD Advisory· Published Oct 16, 2019· Updated Aug 4, 2024
CVE-2019-13116
CVE-2019-13116
Description
The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.mule.runtime:muleMaven | < 3.8.0 | 3.8.0 |
Affected products
2- MuleSoft/Mule Community Edition runtime enginedescription
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-cvcf-w75c-gw5rghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-13116ghsaADVISORY
- docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notesghsax_refsource_MISCWEB
- threat.tevora.com/mulesoft-3-8-unauthenticated-rceghsaWEB
- threat.tevora.com/mulesoft-3-8-unauthenticated-rce/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.