Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.17.4
purl pkg:maven/org.apache.camel/camel-core@2.17.4
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
CVE-2017-5643

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
2.18.3
Vulnerable
2.20.2
Vulnerable
2.21.0
Vulnerable
CVE-2017-3159

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
2.17.5
Vulnerable
2.18.3
Vulnerable
2.20.2
Vulnerable
2.21.0
Vulnerable
2.19.1
Vulnerable
2.19.3
Vulnerable
2.19.5
Vulnerable
2.20.1
Vulnerable
2.21.1
Vulnerable
2.21.5
Vulnerable
2.22.0
Vulnerable
2.22.1
Vulnerable
2.22.2
Vulnerable
2.22.4
Vulnerable
2.23.0
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
2.25.2
Vulnerable
CVE-2018-8027

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
2.21.1
Vulnerable
2.21.5
Vulnerable
2.22.0
Vulnerable
2.22.1
Vulnerable
2.22.2
Vulnerable
2.22.4
Vulnerable
2.23.0
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
2.20.4
Vulnerable
CVE-2016-8749

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
2.17.5
Vulnerable
2.18.3
Vulnerable
2.20.2
Vulnerable
2.21.0
Vulnerable
2.19.1
Vulnerable
2.19.3
Vulnerable
2.19.5
Vulnerable
2.20.1
Vulnerable
2.21.1
Vulnerable
2.21.5
Vulnerable
2.22.0
Vulnerable
2.22.1
Vulnerable
2.22.2
Vulnerable
2.22.4
Vulnerable
2.23.0
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
GHSA-h896-mx9x-g32g
Aliases:
CVE-2019-0188
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability …
2.24.0
Vulnerable
CVE-2017-5643

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE This package is vulnerable against SSRF via …
2.18.3
Vulnerable
2.17.6
Vulnerable
2.19.0
Vulnerable
CVE-2019-0194

Path Traversal Apache Camel's File is vulnerable to directory traversal.
2.19.1
Vulnerable
2.23.1
Vulnerable
2.22.3
Vulnerable
2.21.4
Vulnerable
GHSA-vq9j-jh62-5hmp
Aliases:
CVE-2017-5643
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. Description: The Validation Component of Apache Camel …
2.17.6
Vulnerable
2.17.6
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2013-4330
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language …
CVE-2015-5344
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via …
CVE-2015-0264
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers …