Medium WID-SEC-2023-1694 1 CVE

Apache Camel: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jul 9, 2023 · Updated Jul 9, 2023 · de-DE

Vendor: Apache Product: Camel Product: Camel < 3.14.9 Product: Camel < 3.18.8 Product: Camel < 3.20.6 Product: Camel < 3.21.0 Product: Camel < 4.0.0-RC1

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Apache Camel ausnutzen, um Informationen offenzulegen.

Product

Apache Camel ist ein Integrations-Framework, das Enterprise Integration Patterns implementiert.

Vulnerabilities 1

Low 3.3

CVE-2023-34442

Apache Camel JIRA: Temporary file information disclosure in Camel-Jira

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.…

Apache Software Foundation Apache Camel JIRA org.apache.camel:camel-jira Web / CMS Maven

Jul 10, 2023

Revision history

2023-07-09 #1
Initiale Fassung

References

Apache Camel Security Advisory vom 2023-07-09
https://camel.apache.org/security/CVE-2023-34442.html