critical9.8
CVE-2020-10991
Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit
Impact
## Withdrawn Advisory This advisory has been withdrawn because it does not affected a package in a [supported ecosystem](https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#about-types-of-security-advisories). This link has been maintained to preserve external references. ## Original Description Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.mule.modules:mule-apikit-module | <= 1.3.0 | 1.3.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mulesoft | Aplkit | through 1.3.0 |