Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-core

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2015-0263

    Apache Camel XML External Entity vulnerability

    XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

    org.apache.camel:camel-core Maven
  • Medium —
    CVE-2015-0264

    Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object

    Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile ob…

    org.apache.camel:camel-core Maven
  • Medium —
    CVE-2013-4330

    Improper Control of Generation of Code in Apache Camel

    Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.

    org.apache.camel:camel-core Maven