CVE-2025-64318 — Salesforce / Mulesoft Anypoint Code Builder

CVE-2025-64318

Salesforce / Mulesoft Anypoint Code Builder PUBLISHED

Description (CNA)

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1.

Affected (CNA)

Vendor / product	Versions
Salesforce / Mulesoft Anypoint Code Builder	affected 0 before 1.12.1

CWE

CWE-1427

References

https://help.salesforce.com/s/articleView?id=005228032&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.