Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.20.1
purl pkg:maven/org.apache.camel/camel-core@2.20.1
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 4.4
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2018-8027

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
2.21.1
Vulnerable
2.21.5
Vulnerable
2.22.0
Vulnerable
2.22.1
Vulnerable
2.22.2
Vulnerable
2.22.4
Vulnerable
2.23.0
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
2.20.4
Vulnerable
CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel …
2.21.5
Vulnerable
2.22.4
Vulnerable
2.23.1
Vulnerable
2.23.2
Vulnerable
2.23.3
Vulnerable
2.24.1
Vulnerable
2.24.2
Vulnerable
2.24.3
Vulnerable
2.25.0
Vulnerable
2.25.1
Vulnerable
2.25.2
Vulnerable
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
GHSA-h896-mx9x-g32g
Aliases:
CVE-2019-0188
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability …
2.24.0
Vulnerable
GHSA-8vfm-4388-6rpc
Aliases:
CVE-2018-8027
Apache is vulnerable to XXE in XSD validation processor Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to …
2.20.4
Vulnerable
2.20.4
Vulnerable
CVE-2018-8041

Path Traversal Apache Camel Mail is vulnerable to path traversal.
2.22.1
Vulnerable
2.20.4
Vulnerable
2.21.2
Vulnerable
2.22.1
Vulnerable
2.20.4
Vulnerable
2.21.2
Vulnerable
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2017-3159
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
CVE-2015-0263
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before …
CVE-2013-4330
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language …
CVE-2015-5344
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via …
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
CVE-2015-0264
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers …