Back to feed
EUVD-2018-0487 · Published Oct 16, 2018
Apache Camel XML External Entity vulnerability
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
Technologies
Apache Camel
Weaknesses
NVD-CWE-OtherCWE-611
References
- http://rhn.redhat.com/errata/RHSA-2015-1041.html
- http://rhn.redhat.com/errata/RHSA-2015-1538.html
- http://rhn.redhat.com/errata/RHSA-2015-1539.html
- http://www.securitytracker.com/id/1032442
- https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.asc
- https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36
Potentially impacted assets
See if this affects your attack surface
