CVE-2025-64318

Summary

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1.

Affected Software

VendorProductVersion RangeStatus
SalesforceMulesoft Anypoint Code Builder0 < 1.12.1affected

Weaknesses

  • CWE-1427: CWE-1427 Improper Neutralization of Input Used for LLM Prompting

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References