com.alipay.sofa:tracer-sofa-boot-starter (>=3.1.0 <=3.1.2), com.pleosoft:pleosoft-spring-boot-starter (=1.0.5-RELEASE) +40 more potentially affected by CVE-2020-5413 via org.springframework.integration:spring-integration-core (>=5.1.0.RELEASE <=5.1.11.RELEASE)

org.springframework.integration:spring-integration-core MAVEN version =5.1.0.RELEASE, =3.1.0, =0.2.0.RELEASE, =2.23.0, =2.23.0, =2.1.0.RELEASE, =5.1.0.RELEASE, =5.1.0.RELEASE, =5.1.0.RELEASE, =5.1.0.RELEASE, =5.1.0.RELEASE, =5.1.0.RELEASE, =5.1.11.RELEASE - org.springframework.integration:spring...

org.apache.camel.kafkaconnector:camel-robotframework-kafka-connector (>=0.1.0 <=0.3.0), org.apache.camel.quarkus:camel-quarkus-integration-test-robotframework (>=2.3.0 <=2.16.0) +5 more potentially affected by CVE-2020-11994 via org.apache.camel:camel-robotframework (>=3.0.0-RC2 <=3.3.0)

org.apache.camel:camel-robotframework MAVEN version =3.0.0-RC2, =0.1.0, =2.3.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =3.0.0-RC2, =3.0.0-RC3 Source cves: CVE-2020-11994 Source advisory: OSV:GHSA-9VFJ-5G7H-4P24...

Server side template injection in Apache Camel

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

GHSA-9VFJ-5G7H-4P24 Server side template injection in Apache Camel

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

Security Bulletin: Multiple vulnerabilities have been identified in Apache Camel shipped with IBM Netcool/OMNIbus Probe DSL Factory Framework

Summary Apache Camel is a dependency component shipped with the IBM Netcool/OMNIbus Probe DSL Factory Framework. Information about the security vulnerabilities affecting Apache Camel has been published. CVE-2020-11971, CVE-2020-11973, CVE-2020-11972 Vulnerability Details CVEID: CVE-2020-11971...

CVE-2020-11994

A flaw was found in camel. Camel's templating components are suseptable to Server-Side Template Injection and arbitrary file disclosure. The highest threat from this vulnerability is to data confidentiality...

Server-Side Template Injection

camel-robotframework is vulnerable to server-side template injection. An attacker is able to inject and execute arbitrary code via server-side templates...

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

Design/Logic Flaw

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

CVE-2020-11994

CVE-2020-11994 is a Server-Side Template Injection in the Apache Camel templating component used by Oracle Enterprise Manager Cloud Control Base Platform (13.4.0.0), specifically in the Reporting Framework. The vulnerability enables arbitrary file disclosure and high-impact data exposure due to C...

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

CVE-2020-11972

A flaw was found in camel up to versions 2.25.1 and 3.x. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

CVE-2020-11973

A flaw was found in camel. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation...

CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0. Mitigation The JMX instrumentation agent is the vulnerable component in this, if not being used it can be disabled in the following ways As a...

Security Bulletin: IBM Jazz for Service Management is vulnerable to Apache Camel Core vulnerabilities

Summary IBM Jazz for Service Management is vulnerable to Apache Camel Core vulnerabilities CVE-2020-11971, CVE-2020-11973, CVE-2020-11972 Vulnerability Details CVEID: CVE-2020-11971 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by a rebind flaw in...

com.github.taymindis:channeling-camel (>=2.3.1 <=2.3.2), com.github.taymindis:channeling-camel-springboot (>=2.3.1 <=2.3.2) +47 more potentially affected by CVE-2020-11973 via org.apache.camel:camel-netty (>=3.0.0 <=3.22.4)

org.apache.camel:camel-netty MAVEN version =3.0.0, =2.3.1, =2.3.1, =0.46, =0.3, =0.5, =1.3.0, =1.3.0, =1.3.0, =0.1.0, =0.1.0, =0.10.1, =0.10.1, =3.21.0 and more Source cves: CVE-2020-11973 Source advisory: OSV:GHSA-H79P-32MX-FJJ9...

Apache Camel Netty enables Java deserialization by default

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0...

GHSA-H79P-32MX-FJJ9 Apache Camel Netty enables Java deserialization by default

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0...

JMX Rebind Flaw

camel is vulnerable to JMX rebind. The vulnerability exists due to a lack of security on JMX connector configuration...