Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-0263
5
MEDIUMCVSS v2
Published
June 3, 2015
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.= 2.14.0, <= 2.13.3, = 2.14.1NVD