CVE-2019-0188

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

XML External Entity (XXE)

apache camel is vulnerable to XML external entity XXE attacks. The application uses an outdated and vulnerable JSON-lib library, camel-xmljson, which allows an attacker to perform XXE attacks...

Apache Camel vulnerable to XML external entity injection (XXE)

Overview Apache Camel provided by The Apache Software Foundation contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. Takayoshi Isayama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

JVN#71498764: Apache Camel vulnerable to XML external entity injection (XXE)

Apache Camel provided by The Apache Software Foundation contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. Impact By processing a specially crafted request, an arbitrary file on the server may be read. Solution Update the...

Apache Camel XML External Entity Injection Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

com.garethahealy.elastawatch:elastic-loader (=6.4.0), com.github.bjuvensjo:rsimulator-camel-direct (>=2.1.2 <=2.1.12) +728 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (>=2.22.0 <=2.22.2)

org.apache.camel:camel-core MAVEN version =2.22.0, =2.1.2, =2.1.2, =0.2.1, =0.1, =2.22.0, =2.22.1 - edu.amherst.acdc:acrepo-connector-broadcast =1.2.0 - edu.amherst.acdc:acrepo-connector-idiomatic =1.2.0 - edu.amherst.acdc:acrepo-connector-triplestore =1.2.0 -...

com.cognifide.aet:cleaner (>=3.0.0 <=3.2.2), com.cognifide.aet:communication (>=3.0.0 <=3.2.2) +724 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (>=2.21.0 <=2.21.4)

org.apache.camel:camel-core MAVEN version =2.21.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.1.7, =2.21.0, =0.0.1, =0.1.23, =0.6.0, =0.6.0, =0.6.0, =0.7.0 and more Source cves: CVE-2019-0194 Source advisory: OSV:GHSA-4WJQ-69RC-8WCP...

com.github.oscerd:camel-cassandra (=2.23.0), com.playtika.sleuth:sleuth-camel-core (=1.0.2) +664 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (=2.23.0)

org.apache.camel:camel-core MAVEN version =2.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.oscerd:camel-cassandra =2.23.0 - com.playtika.sleuth:sleuth-camel-core =1.0.2 -...

GHSA-4WJQ-69RC-8WCP Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Directory traversal

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

CVE-2019-0194 affects Apache Camel’s File component and enables directory traversal in Camel versions 2.21.0–2.21.3, 2.22.0–2.22.2, 2.23.0, and some older 2.x lines. Connected sources confirm this is a known vulnerability in multiple products (e.g., IBM Tivoli Netcool/OMNIbus components and Resil...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Apache Camel Path Traversal Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

com.github.chrisgleissner:spring-batch-rest-api (>=1.0.3 <=1.2.7), com.github.chrisgleissner:spring-batch-rest-example (>=1.0.3 <=1.2.7) +7 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (=4.1.0.RELEASE)

org.springframework.batch:spring-batch-core MAVEN version =4.1.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - com.github.chrisgleissner:spring-batch-rest-api =1.0.3, =1.0.3,...

Important: Red Hat Security Advisory: Red Hat Fuse 7.2 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...