VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026

CVE-2021-1627

CVE-2021-1627

Description

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. This affects: Mule 3.8.x,3.9.x,4.x runtime released before February 2, 2021.

Affected products

3
  • Salesforce/Mule
    cpe:2.3:a:salesforce:mule:*:*:*:*:*:*:*:*
    Range: >=3.8.0,<=4.2.2
  • MuleSoft/Mule runtime componentdescription
  • Mulesoft/Mule Runtimellm-fuzzy
    Range: < February 2, 2021

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.