Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-11994
7.5
HIGHCVSS v3
Published
July 8, 2020
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.>= 2.22.0, <= 2.22.5, >= 2.23.0, <= 2.23.4, >= 2.24.0, <= 2.24.3, = 2.25.0, = 2.25.1, >= 3.0.0, <= 3.3.0NVD