Server-Side Request Forgery (SSRF)

Apache Camel is vulnerable to Server-Side Request Forgery (SSRF) via remote DTDs URLs or XML External Entities (XXE). This is because the validation component of Apache Camel evaluates DTD headers of XML stream sources, although a validation against XML schemas (XSD) is executed. Remote attackers can exploit it to make Server-Side Request Forgery attacks by sending XML documents with remote DTDs URLs or XML External Entities. The vulnerability is not given for SAX or StAX sources.