CVE-2019-0188

Published May 28th, 2019

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.

apache/camel

Apache Camel is an open source integration framework that empowers you to quickly and easily integrate various systems consuming or producing data.

GitHub

6.22K