Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.7.3
purl pkg:maven/org.apache.camel/camel-core@2.7.3
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (14)
Advisory Summary Fixed in package version
GHSA-2fw5-rvf2-jq56
Aliases:
CVE-2014-0002
Apache Camel's XSLT component allows remote attackers to read arbitrary files The XSLT component in Apache Camel before 2.11.4 and …
2.11.4
Vulnerable
GHSA-3hrc-f439-727g
Aliases:
CVE-2015-0263
Apache Camel XML External Entity vulnerability XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache …
2.13.4
Vulnerable
GHSA-mhx2-r3jx-g94c
Aliases:
CVE-2015-0264
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object Multiple …
2.13.4
Vulnerable
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
GHSA-x9fv-c87w-55wc
Aliases:
CVE-2013-4330
Improper Control of Generation of Code in Apache Camel Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and …
2.9.7
Vulnerable
GHSA-h896-mx9x-g32g
Aliases:
CVE-2019-0188
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability …
2.24.0
Vulnerable
CVE-2013-4330

Remote code execution via header field manipulation This package allows remote attackers to execute arbitrary simple language expressions by including …
2.12.1
Vulnerable
2.9.8
Vulnerable
2.10.7
Vulnerable
2.11.2
Vulnerable
CVE-2015-0263

XXE in Apache Camel XML external entity (XXE) vulnerability in the XML converter setup in `converter/jaxp/XmlConverter.java` in this package allows …
2.13.4
Vulnerable
2.14.2
Vulnerable
CVE-2017-5643

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE This package is vulnerable against SSRF via …
2.18.3
Vulnerable
2.17.6
Vulnerable
2.19.0
Vulnerable
CVE-2019-0194

Path Traversal Apache Camel's File is vulnerable to directory traversal.
2.19.1
Vulnerable
2.23.1
Vulnerable
2.22.3
Vulnerable
2.21.4
Vulnerable
CVE-2015-0264

XXE in Apache Camel Multiple XML external entity (XXE) vulnerabilities in `builder/xml/XPathBuilder.java` in this package allow remote attackers to read …
2.13.4
Vulnerable
2.14.2
Vulnerable
GHSA-vq9j-jh62-5hmp
Aliases:
CVE-2017-5643
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. Description: The Validation Component of Apache Camel …
2.17.6
Vulnerable
2.17.6
Vulnerable
CVE-2014-0002

Read arbitrary files The XSLT component in this package allows remote attackers to read arbitrary files and possibly have other …
2.11.4
Vulnerable
2.12.3
Vulnerable
2.11.4
Vulnerable
2.12.3
Vulnerable
CVE-2014-0003

External method call in XSL stylesheets The XSLT component in this package allows remote attackers to execute arbitrary Java methods …
2.11.4
Vulnerable
2.12.3
Vulnerable
2.11.4
Vulnerable
2.12.3
Vulnerable
This package is not known to fix any advisories.