github_osv/GHSA-h6rp-8v4j-hwph
Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
gitlab/maven/org.apache.camel/camel-core/CVE-2014-0003
External method call in XSL stylesheets
The XSLT component in this package allows remote attackers to execute arbitrary Java methods via a crafted message.