org.apache.camel:camel-cxf (>=2.12.5, <=2.13.3), org.apache.camel:camel-example-cxf (>=2.12.5, <=2.13.3) +55 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.7.13)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.7.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf =2.12.5, =2.12.5, =2.12.5, =2.12.5, =2.12.5, =2.12.5,...

org.apache.camel:camel-cxf (2.6.0), org.apache.camel:camel-example-cxf (2.6.0) +63 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.3.2)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf 2.6.0 - org.apache.camel:camel-example-cxf 2.6.0 -...

org.apache.camel:camel-cxf (>=2.7.0, <=2.7.2), org.apache.camel:camel-example-cxf (>=2.7.0, <=2.7.2) +48 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.3.3)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0,...

net.javacrumbs:smock-http-cxf (>=0.1, <=0.7), org.apache.camel:camel-cxf (2.5.0) +30 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.2.11)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - net.javacrumbs:smock-http-cxf =0.1, =0.7 - org.apache.camel:camel-cxf 2.5.0 -...

org.apache.camel:camel-cxf (>=1.6.4, <=2.4.0), org.apache.camel:camel-example-cxf (>=1.6.4, <=2.4.0) +51 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.2.9)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf =1.6.4, =1.6.4, =1.6.4, =1.6.4, =2.4.0 -...

org.apache.camel:camel-cxf (2.7.3), org.apache.camel:camel-example-cxf (2.7.3) +30 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.3.5)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf 2.7.3 - org.apache.camel:camel-example-cxf 2.7.3 -...

org.apache.camel:camel-cxf (2.9.0-rc1), org.apache.camel:camel-example-cxf (2.9.0-rc1) +56 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.5.0)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf 2.9.0-rc1 - org.apache.camel:camel-example-cxf 2.9.0-rc1 -...

org.apache.camel:camel-cxf (>=2.10.5, <=2.10.6), org.apache.camel:camel-example-cxf (>=2.10.5, <=2.10.6) +50 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.6.8)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf =2.10.5, =2.10.5, =2.10.5, =2.10.5, =2.10.5, =2.10.5,...

org.apache.camel:camel-cxf (2.3.0), org.apache.camel:camel-example-cxf (2.3.0) +24 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.2.8)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf 2.3.0 - org.apache.camel:camel-example-cxf 2.3.0 -...

org.apache.camel:camel-cometd (2.4.0), org.apache.camel:camel-example-cxf (2.4.0) +90 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.1.4.v20100610)

org.eclipse.jetty:jetty-server MAVEN version 7.1.4.v20100610 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd 2.4.0 - org.apache.camel:camel-example-cxf 2.4.0 -...

org.apache.camel:camel-cometd (2.4.0), org.apache.camel:camel-example-cxf (2.4.0) +90 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.4.v20100610)

org.eclipse.jetty:jetty-server MAVEN version 7.1.4.v20100610 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd 2.4.0 - org.apache.camel:camel-example-cxf 2.4.0 -...

org.apache.camel:camel-cometd (2.4.0), org.apache.camel:camel-example-cxf (2.4.0) +90 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.1.4.v20100610)

org.eclipse.jetty:jetty-server MAVEN version 7.1.4.v20100610 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd 2.4.0 - org.apache.camel:camel-example-cxf 2.4.0 -...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

GHSA-H6RP-8V4J-HWPH Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

Apache Camel's XSLT component allows remote attackers to read arbitrary files

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...

GHSA-2FW5-RVF2-JQ56 Apache Camel's XSLT component allows remote attackers to read arbitrary files

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External...

GHSA-VQ9J-JH62-5HMP Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

Description: The Validation Component of Apache Camel evaluates DTD headers of XML stream sources, although a validation against XML schemas XSD is executed. Remote attackers can use this feature to make Server-Side Request Forgery SSRF attacks by sending XML documents with remote DTDs URLs or XM...

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

Description: The Validation Component of Apache Camel evaluates DTD headers of XML stream sources, although a validation against XML schemas XSD is executed. Remote attackers can use this feature to make Server-Side Request Forgery SSRF attacks by sending XML documents with remote DTDs URLs or XM...

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...

GHSA-VVJC-Q5VR-52Q6 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...