Description
Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache | Apache Camel | Camel 2.21.0 to 2.21.3, Camel 2.22.0 to 2.22.2 and Camel 2.23.0 The unsupported Camel 2.x (2.19 and earlier) versions may be also affected. | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.camel:camel-core | >= 2.21.0, < 2.21.5 | 2.21.5 | GHSA-4wjq-69rc-8wcp |
| Maven | org.apache.camel:camel-core | >= 2.22.0, < 2.22.3 | 2.22.3 | GHSA-4wjq-69rc-8wcp |
| Maven | org.apache.camel:camel-core | >= 2.23.0, < 2.23.1 | 2.23.1 | GHSA-4wjq-69rc-8wcp |
References
- [camel-commits] 20190430 [camel] branch master updated: Added CVE-2019-0194 details mailing-list
- [camel-users] 20190430 [SECURITY] New security advisory CVE-2019-0194 released for Apache Camel mailing-list
- [camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html mailing-list
- [oss-security] 20190430 [SECURITY] New security advisory CVE-2019-0194 released for Apache Camel mailing-list
- https://lists.apache.org/thread.html/a39441db574ee996f829344491b3211b53c9ed926f00ae5d88943b76%40%3Cdev.camel.apache.org%3E
- 108181 vdb-entry
- [camel-commits] 20190524 [camel] branch master updated: Added security advisory for CVE-2019-0188 mailing-list
- [camel-commits] 20190524 [camel] 02/02: CVE-2019-0188 - Changed the title in security advisories mailing-list
- [camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html mailing-list