Search for packages
| purl | pkg:maven/org.apache.camel/camel-core@2.14.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-579q-qqj8-63gs
Aliases: CVE-2019-0194 GHSA-4wjq-69rc-8wcp |
Path Traversal Apache Camel's File is vulnerable to directory traversal. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-et64-wksj-qyhj
Aliases: CVE-2017-5643 GHSA-vq9j-jh62-5hmp |
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. |
Affected by 2 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-n8rf-enh6-q3bq
Aliases: CVE-2019-0188 GHSA-h896-mx9x-g32g |
Apache Camel contains an XML external entity injection vulnerability due to using an outdated vulnerable JSON-lib library. This affects only the `camel-xmljson` component, which was removed. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-aard-mgx9-rff2 | XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource. |
CVE-2015-0263
GHSA-3hrc-f439-727g |
| VCID-m8hb-4rwu-jkcy | Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query. |
CVE-2015-0264
GHSA-mhx2-r3jx-g94c |