Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-0264
5
MEDIUMCVSS v2
Published
June 3, 2015
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.= 2.14.0, <= 2.13.3, = 2.14.1NVD