JSON-lib XXE

The vulnerability of the JSON-lib library and the camel-xmljson component of the Java framework Apache Camel is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to perform an XXE attack remotely...

com.easyinnova:dpf_manager (3.0), net.osgiliath.features:net.osgiliath.feature.activemq (>=0.3.1, <=0.3.7) +69 more potentially affected by CVE-2019-0188 via org.apache.camel:camel-xmljson (>=2.12.1, <=2.23.4)

org.apache.camel:camel-xmljson MAVEN version =2.12.1, =0.3.1, =0.3.1, =0.3.1, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.3 and more Source cves: CVE-2019-0188 Source advisory: GHSA-H896-MX9X-G32Ghttps://vu...

GHSA-H896-MX9X-G32G XML External Entity injection in Apache Camel

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

com.easyinnova:dpf_manager (3.0), net.osgiliath.features:net.osgiliath.feature.activemq (>=0.3.1, <=0.3.7) +69 more potentially affected by CVE-2019-0188 via org.apache.camel:camel-xmljson (>=2.12.1, <=2.23.4)

org.apache.camel:camel-xmljson MAVEN version =2.12.1, =0.3.1, =0.3.1, =0.3.1, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.3 and more Source cves: CVE-2019-0188 Source advisory: OSV:GHSA-H896-MX9X-G32Ghttps:...

CVE-2019-0188

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

CVE-2019-0188

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

PT-2019-3933

Name of the Vulnerable Software and Affected Versions Apache Camel versions prior to 2.24.0 Description The issue is related to an XML external entity injection XXE vulnerability due to the use of an outdated vulnerable JSON-lib library. This affects the camel-xmljson component. The vulnerability...

CVE-2019-0188: Improper Restriction of XML External Entity Reference

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...