Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-u8qd-sxh5-w7bc
Summary
Improper Restriction of XML External Entity Reference
Apache Camel is vulnerable to XXE in XSD validation processor.
Aliases
0
alias CVE-2018-8027
1
alias GHSA-8vfm-4388-6rpc
Fixed_packages
0
url pkg:maven/org.apache.camel/camel-core@2.20.4
purl pkg:maven/org.apache.camel/camel-core@2.20.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.4
1
url pkg:maven/org.apache.camel/camel-core@2.21.1
purl pkg:maven/org.apache.camel/camel-core@2.21.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-nk63-z1cj-p3f8
2
vulnerability VCID-sy7j-en6c-97ey
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.21.1
2
url pkg:maven/org.apache.camel/camel-mail@2.20.4
purl pkg:maven/org.apache.camel/camel-mail@2.20.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.4
3
url pkg:maven/org.apache.camel/camel-mail@2.21.1
purl pkg:maven/org.apache.camel/camel-mail@2.21.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.21.1
Affected_packages
0
url pkg:maven/org.apache.camel/camel-core@2.20.0
purl pkg:maven/org.apache.camel/camel-core@2.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-sy7j-en6c-97ey
2
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.0
1
url pkg:maven/org.apache.camel/camel-core@2.20.1
purl pkg:maven/org.apache.camel/camel-core@2.20.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-sy7j-en6c-97ey
2
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.1
2
url pkg:maven/org.apache.camel/camel-core@2.20.2
purl pkg:maven/org.apache.camel/camel-core@2.20.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-sy7j-en6c-97ey
2
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.2
3
url pkg:maven/org.apache.camel/camel-core@2.20.3
purl pkg:maven/org.apache.camel/camel-core@2.20.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-sy7j-en6c-97ey
2
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.3
4
url pkg:maven/org.apache.camel/camel-core@2.21.0
purl pkg:maven/org.apache.camel/camel-core@2.21.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a9kb-uhxc-kfb1
1
vulnerability VCID-nk63-z1cj-p3f8
2
vulnerability VCID-sy7j-en6c-97ey
3
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.21.0
5
url pkg:maven/org.apache.camel/camel-mail@2.20.0
purl pkg:maven/org.apache.camel/camel-mail@2.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
1
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.0
6
url pkg:maven/org.apache.camel/camel-mail@2.20.1
purl pkg:maven/org.apache.camel/camel-mail@2.20.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
1
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.1
7
url pkg:maven/org.apache.camel/camel-mail@2.20.2
purl pkg:maven/org.apache.camel/camel-mail@2.20.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
1
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.2
8
url pkg:maven/org.apache.camel/camel-mail@2.20.3
purl pkg:maven/org.apache.camel/camel-mail@2.20.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
1
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.3
9
url pkg:maven/org.apache.camel/camel-mail@2.21.0
purl pkg:maven/org.apache.camel/camel-mail@2.21.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sy7j-en6c-97ey
1
vulnerability VCID-u8qd-sxh5-w7bc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.21.0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8027.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8027.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-8027
reference_id
reference_type
scores
0
value 0.02526
scoring_system epss
scoring_elements 0.85727
published_at 2026-06-05T12:55:00Z
1
value 0.02526
scoring_system epss
scoring_elements 0.85704
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-8027
2
reference_url https://github.com/apache/camel
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel
3
reference_url https://github.com/apache/camel/commit/22c355bb4ffb500405499d189db30932ca5aac9
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/22c355bb4ffb500405499d189db30932ca5aac9
4
reference_url https://github.com/apache/camel/commit/24eefa559fe6b310629d2bf00663d2679ec81b9
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/24eefa559fe6b310629d2bf00663d2679ec81b9
5
reference_url https://github.com/apache/camel/commit/2c6964ae94d8f9a9c9a32e5ae5a0b794e8b8d3b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/2c6964ae94d8f9a9c9a32e5ae5a0b794e8b8d3b
6
reference_url https://github.com/apache/camel/commit/2e8f21dec883b083ddcdddd802847b4c378a61a
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/2e8f21dec883b083ddcdddd802847b4c378a61a
7
reference_url https://github.com/apache/camel/commit/3fe03e361725b66c1c3eaa40bb11577fb3dc17b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/3fe03e361725b66c1c3eaa40bb11577fb3dc17b
8
reference_url https://github.com/apache/camel/commit/8467d644813a62f3a836c0c7dee8cf5a41de3c0
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/8467d644813a62f3a836c0c7dee8cf5a41de3c0
9
reference_url https://github.com/apache/camel/commit/87c92b7b38890c217bc76f2c55036e6a5cca9a0
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/87c92b7b38890c217bc76f2c55036e6a5cca9a0
10
reference_url https://github.com/apache/camel/commit/8afc5d1757795fde715902067360af5d90f046d
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/8afc5d1757795fde715902067360af5d90f046d
11
reference_url https://github.com/apache/camel/commit/99cbcd78b7e64083fae1d9552ead7425a90994b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/99cbcd78b7e64083fae1d9552ead7425a90994b
12
reference_url https://github.com/apache/camel/commit/9c6a8f61de40c20f28240fbb2af4cb425793d41
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/9c6a8f61de40c20f28240fbb2af4cb425793d41
13
reference_url https://github.com/apache/camel/commit/9f7376abbff7434794f2c7c2909e02bac232fb5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/9f7376abbff7434794f2c7c2909e02bac232fb5
14
reference_url https://github.com/apache/camel/commit/ec3d0db81ba061b27e934d5ff56e9baca0049eb
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/ec3d0db81ba061b27e934d5ff56e9baca0049eb
15
reference_url https://issues.apache.org/jira/browse/CAMEL-10894
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/CAMEL-10894
16
reference_url https://issues.apache.org/jira/browse/CAMEL-12444
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/CAMEL-12444
17
reference_url https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/77f596fc63e63c2e9adcff3c34759b32c225cf0b582aedb755adaade@%3Cdev.camel.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/77f596fc63e63c2e9adcff3c34759b32c225cf0b582aedb755adaade@%3Cdev.camel.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
20
reference_url http://www.securityfocus.com/bid/104933
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/104933
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1611632
reference_id 1611632
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1611632
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-8027
reference_id CVE-2018-8027
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-8027
23
reference_url http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.asc
reference_id CVE-2018-8027.TXT.ASC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.asc
24
reference_url https://github.com/advisories/GHSA-8vfm-4388-6rpc
reference_id GHSA-8vfm-4388-6rpc
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-8vfm-4388-6rpc
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.4 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-u8qd-sxh5-w7bc