Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0003US | high7.5 | — | ||
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted… | ||||
02
references
External citations — patches, advisories, analysis.
- http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.ascWEB
- http://rhn.redhat.com/errata/RHSA-2014-0245.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-0254.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-0371.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-0372.htmlWEB
- https://github.com/apache/camelPACKAGE
- https://github.com/apache/camel/commit/483b445dc77487e2d0f3d8c8bf1a7bbab04464cWEB
- https://github.com/apache/camel/commit/c6de749e9b3c7b61861c5480e91550290585224WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan