~ / search / GHSA-jffq-528j-mp6c

GHSA-jffq-528j-mp6c

Withdrawn on 2025-07-02. GitHub withdrew this advisory; it no longer applies.

Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-10991

Packages

EcosystemPackageAffectedFixed in
Maven org.mule.modules:mule-apikit-module < 1.3.1 1.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

## Withdrawn Advisory This advisory has been withdrawn because it does not affected a package in a [supported ecosystem](https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#about-types-of-security-advisories). This link has been maintained to preserve external references. ## Original Description Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java

References

External links from the advisory. They lead to third-party sites.