Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-0188
7.5
HIGHCVSS v3
Published
May 28, 2019
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.< 2.24.0NVD