{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.0.0","last_affected":"4.1.5"}],"component":"org.mule.runtime:mule","cve_ids":["CVE-2019-15630"],"ecosystem":"Maven","epss":0.02998,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mwh9-gr45-xvv4","id":"tcs_01M5N95YGX6BXV3Q6HK9YMEVYS","modified_at":"2024-02-16T08:16:38.068235Z","published_at":"2022-05-24T16:55:15Z","references":["https://osv.dev/vulnerability/GHSA-mwh9-gr45-xvv4","https://nvd.nist.gov/vuln/detail/CVE-2019-15630","https://github.com/mulesoft/mule","https://help.mulesoft.com/s/article/Directory-traversal-vulnerability-affecting-runtimes-of-MuleSoft-customers-running-certain-use-cases-of-Mule-flows-and-API-Gateways"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mwh9-gr45-xvv4","url":"https://osv.dev/vulnerability/GHSA-mwh9-gr45-xvv4"}],"summary":"Mule modules contain Directory Traversal"}