1628 matches found
Apache Camel can allow remote attackers to execute arbitrary commands
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using 1 camel-jetty or 2 camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request...
org.apache.camel:camel-example-cxf (1.6.1), org.apache.camel:camel-jetty (1.6.1) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.1)
org.apache.camel:camel-http MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.1 - org.apache.camel:camel-jetty 1.6.1 Source cves: CVE-2015-5348...
org.apache.camel:camel-example-cxf (1.6.0), org.apache.camel:camel-jetty (1.6.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.0)
org.apache.camel:camel-http MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.0 - org.apache.camel:camel-jetty 1.6.0 Source cves: CVE-2015-5348...
GHSA-GV5F-CJW9-5VXG Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request...
Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request...
org.apache.camel:camel-activemq (1.0.0), org.apache.camel:camel-bam (1.0.0) +18 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (1.0.0)
org.apache.camel:camel-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.0.0 - org.apache.camel:camel-bam 1.0.0 - org.apache.camel:camel-cxf 1.0...
org.apache.camel:camel-activemq (1.1.0), org.apache.camel:camel-bam (1.1.0) +23 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (1.1.0)
org.apache.camel:camel-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.1.0 - org.apache.camel:camel-bam 1.1.0 - org.apache.camel:camel-cxf 1.1...
org.apache.camel:camel-amqp (1.6.0), org.apache.camel:camel-atom (1.6.0) +67 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (1.6.0)
org.apache.camel:camel-core MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.0 - org.apache.camel:camel-atom 1.6.0 - org.apache.camel:camel-bam 1.6.0 ...
org.apache.camel:camel-amqp (1.6.1), org.apache.camel:camel-atom (1.6.1) +60 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (1.6.1)
org.apache.camel:camel-core MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.1 - org.apache.camel:camel-atom 1.6.1 - org.apache.camel:camel-bam 1.6.1 ...
org.apache.camel:camel-amqp (1.6.2), org.apache.camel:camel-atom (1.6.2) +59 more potentially affected by CVE-2015-0264 via org.apache.camel:camel-core (1.6.2)
org.apache.camel:camel-core MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.2 - org.apache.camel:camel-atom 1.6.2 - org.apache.camel:camel-bam 1.6.2 ...
GHSA-MHX2-R3JX-G94C Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object
Multiple XML external entity XXE vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML 1 String or 2 GenericFile object in an XPath query...
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object
Multiple XML external entity XXE vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML 1 String or 2 GenericFile object in an XPath query...
org.apache.camel:camel-activemq (1.0.0), org.apache.camel:camel-bam (1.0.0) +18 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (1.0.0)
org.apache.camel:camel-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.0.0 - org.apache.camel:camel-bam 1.0.0 - org.apache.camel:camel-cxf 1.0...
org.apache.camel:camel-amqp (1.4.0), org.apache.camel:camel-atom (1.4.0) +58 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (1.4.0)
org.apache.camel:camel-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.4.0 - org.apache.camel:camel-atom 1.4.0 - org.apache.camel:camel-bam 1.4.0 ...
org.apache.camel:camel-amqp (1.6.0), org.apache.camel:camel-atom (1.6.0) +67 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (1.6.0)
org.apache.camel:camel-core MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.0 - org.apache.camel:camel-atom 1.6.0 - org.apache.camel:camel-bam 1.6.0 ...
org.apache.camel:camel-amqp (1.6.3), org.apache.camel:camel-atom (1.6.3) +58 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (1.6.3)
org.apache.camel:camel-core MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.3 - org.apache.camel:camel-atom 1.6.3 - org.apache.camel:camel-bam 1.6.3 ...
Apache Camel XML External Entity vulnerability
XML external entity XXE vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource...
GHSA-3HRC-F439-727G Apache Camel XML External Entity vulnerability
XML external entity XXE vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource...