org.apache.camel.kafkaconnector:camel-robotframework-kafka-connector (>=0.1.0 <=0.3.0), org.apache.camel.quarkus:camel-quarkus-integration-test-robotframework (>=2.3.0 <=2.16.0) +5 more potentially affected by CVE-2020-11994 via org.apache.camel:camel-robotframework (>=3.0.0-RC2 <=3.3.0)

org.apache.camel:camel-robotframework MAVEN version =3.0.0-RC2, =0.1.0, =2.3.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =3.0.0-RC2, =3.0.0-RC3 Source cves: CVE-2020-11994 Source advisory: OSV:GHSA-9VFJ-5G7H-4P24...

Server-Side Template Injection

camel-robotframework is vulnerable to server-side template injection. An attacker is able to inject and execute arbitrary code via server-side templates...