unauth-mulesoft-dataweave: MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access

2026-06-17 MuleSoft DataWeave PoC Public

Description

The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication

PoC

id: unauth-mulesoft-dataweave

info:
  name: MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access
  author: Th3l0newolf
  severity: high
  description: |
    The MuleSoft DataWeave Interactive Learning Environment is publicly accessible without authentication
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    cwe-id: CWE-94
  metadata:
    max-request: 1
    verified: true
    shodan-query: html:"DataWeave Interactive Learning Environment"
  tags: panel,mulesoft,dataweave,rce,critical,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "DataWeave Interactive Learning Environment")'
          - 'contains_all(body, "dw-monaco-version", "MuleSoft Developers")'
          - 'contains(header, "data-weave")'
        condition: and
# digest: 4a0a00473045022100fc6f990ceb78fd4fdd9e6eee6bdc45e31f80c1034782188c43d35b786d7aece2022040c6777cc18f8ba611080a4782f34cab721a884fbe35b5601298b976b764255b:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/unauth-mulesoft-dataweave.yaml

Related Vulnerabilities