Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit
Date: 2022-05
Affected: maven/org.mule.modules:mule-apikit-module
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2020-10991
CWE: CWE-611
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

## Withdrawn Advisory This advisory has been withdrawn because it does not affected a package in a [supported ecosystem](https://docs.github.com/en/code-security/security-advisories/working-with-global-security-advisories-from-the-github-advisory-database/about-the-github-advisory-database#about-types-of-security-advisories). This link has been maintained to preserve external references. ## Original Description Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java


Mitigations:

Architectural layers (MAESTRO):