Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the validatePathSafety method in the Docling producer. An attacker can make the external docling process use a directory accessible to the Camel process, outside the intended working directory, by supplying an...

Apache Camel path traversal vulnerability

A path traversal vulnerability exists in Apache Camel versions from 4.15.0 up to and including 4.18.5, as well as from 4.19.0 up to and including 4.22.2. This vulnerability stems from improper path name restrictions in the Docling component; the validatePathSafety method only checks for relative...