CVE-2017-5643

2017-03-1615:00:00

apache

www.cve.org

0.007 Low

EPSS

Percentile

80.2%

JSON

Apache Camel’s Validation Component is vulnerable against SSRF via remote DTDs and XXE.

CNA Affected

[
  {
    "product": "Apache Camel",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.17.0 to 2.17.5"
      },
      {
        "status": "affected",
        "version": "2.18.0 to 2.18.2"
      },
      {
        "status": "affected",
        "version": "The unsupported Camel 2.x (2.16 and earlier) versions may be also affected."
      }
    ]
  }
]