CVE-2019-13116

Опубликовано: 16 окт. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections

Ссылки

https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes
Release Notes
https://threat.tevora.com/mulesoft-3-8-unauthenticated-rce/
Exploit
Third Party Advisory
https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes
Release Notes
https://threat.tevora.com/mulesoft-3-8-unauthenticated-rce/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:*:*:*:*

Версия до 3.8.0 (исключая)

EPSS

Процентиль: 85%

0.02389

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-cvcf-w75c-gw5r