org.apache.camel:camel-amqp (1.6.1), org.apache.camel:camel-atom (1.6.1) +60 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.6.1)

org.apache.camel:camel-core MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.1 - org.apache.camel:camel-atom 1.6.1 - org.apache.camel:camel-bam 1.6.1 ...

org.apache.camel:camel-amqp (1.6.3), org.apache.camel:camel-atom (1.6.3) +58 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.6.3)

org.apache.camel:camel-core MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.3 - org.apache.camel:camel-atom 1.6.3 - org.apache.camel:camel-bam 1.6.3 ...

org.apache.camel:camel-amqp (1.6.4), org.apache.camel:camel-atom (1.6.4) +58 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.6.4)

org.apache.camel:camel-core MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.4 - org.apache.camel:camel-atom 1.6.4 - org.apache.camel:camel-bam 1.6.4 ...

org.apache.activemq.tooling:maven-activemq-memtest-plugin (5.2.0), org.apache.activemq.tooling:maven-activemq-perf-plugin (5.2.0) +97 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.5.0)

org.apache.camel:camel-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.activemq.tooling:maven-activemq-memtest-plugin 5.2.0 -...

org.apache.camel:camel-amqp (1.6.2), org.apache.camel:camel-atom (1.6.2) +59 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.6.2)

org.apache.camel:camel-core MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.2 - org.apache.camel:camel-atom 1.6.2 - org.apache.camel:camel-bam 1.6.2 ...

at.researchstudio.sat:won-core (>=0.2, <=0.9), at.researchstudio.sat:won-cryptography (>=0.3, <=0.6) +1433 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=2.0-m1, <=2.17.5)

org.apache.camel:camel-core MAVEN version =2.0-m1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2017-5643 Source advisory: OSV:GHSA-VQ9J-JH62-5HMP...

org.apache.camel:camel-activemq (1.1.0), org.apache.camel:camel-bam (1.1.0) +23 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.1.0)

org.apache.camel:camel-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.1.0 - org.apache.camel:camel-bam 1.1.0 - org.apache.camel:camel-cxf 1.1...

com.googlecode.mycontainer:mycontainer-jms (>=1.2.29, <=1.7.5), com.webtide.hightide:auctiondemo (6.1h.10) +92 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.3.0)

org.apache.camel:camel-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.googlecode.mycontainer:mycontainer-jms =1.2.29, =1.0.1, =2.7.0 -...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0, <=0.3.0) +913 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=2.18.0, <=2.18.1)

org.apache.camel:camel-core MAVEN version =2.18.0, =0.2.0, =0.2.0, =2.7, =2.18.0, =2.18.1 - com.tatsuyafw:camel-fluentd 2.18.0 - cool.pandora:acrepo-exts-image 0.0.3 - cool.pandora:pandora-exts-encoder 0.0.4 and more Source cves: CVE-2017-5643 Source advisory: GHSA-VQ9J-JH62-5HMP...

org.apache.camel:camel-amqp (1.6.0), org.apache.camel:camel-atom (1.6.0) +67 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.6.0)

org.apache.camel:camel-core MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.0 - org.apache.camel:camel-atom 1.6.0 - org.apache.camel:camel-bam 1.6.0 ...

org.apache.camel:camel-activemq (1.0.0), org.apache.camel:camel-bam (1.0.0) +18 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (1.0.0)

org.apache.camel:camel-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.0.0 - org.apache.camel:camel-bam 1.0.0 - org.apache.camel:camel-cxf 1.0...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0, <=0.3.0) +913 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=2.18.0, <=2.18.1)

org.apache.camel:camel-core MAVEN version =2.18.0, =0.2.0, =0.2.0, =2.7, =2.18.0, =2.18.1 - com.tatsuyafw:camel-fluentd 2.18.0 - cool.pandora:acrepo-exts-image 0.0.3 - cool.pandora:pandora-exts-encoder 0.0.4 and more Source cves: CVE-2017-5643 Source advisory: OSV:GHSA-VQ9J-JH62-5HMP...

CVE-2017-5643

It was found that Apache Camel's validation component evaluates DTD headers of XML stream sources, although a validation against XML schemas XSD is executed. Remote attackers can use this feature to make Server-Side Request Forgery SSRF attacks by sending XML documents with remote DTDs URLs or XM...

at.researchstudio.sat:won-core (>=0.2, <=0.9), at.researchstudio.sat:won-cryptography (>=0.3, <=0.6) +1494 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=1.0.0, <=2.17.5)

org.apache.camel:camel-core MAVEN version =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.4, =0.9 and more Source cves: CVE-2017-5643 Source advisory: MEND:CVE-2017-5643...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0, <=0.3.0) +913 more potentially affected by CVE-2017-5643 via org.apache.camel:camel-core (>=2.18.0, <=2.18.1)

org.apache.camel:camel-core MAVEN version =2.18.0, =0.2.0, =0.2.0, =2.7, =2.18.0, =2.18.1 - com.tatsuyafw:camel-fluentd 2.18.0 - cool.pandora:acrepo-exts-image 0.0.3 - cool.pandora:pandora-exts-encoder 0.0.4 and more Source cves: CVE-2017-5643 Source advisory: MEND:CVE-2017-5643...