XML External Entity (XXE)

Apache Camel is vulnerable to XML External Entity XXE attacks. The library doesn't properly handle Document Type Declarations DTD, allowing a malicious user to cause an XXE attack...