Apache Camel XML External Entity vulnerability
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-0263US | medium5.0 | — | ||
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attacker… | ||||
02
references
External citations — patches, advisories, analysis.
- http://rhn.redhat.com/errata/RHSA-2015-1041.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-1538.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-1539.htmlWEB
- http://www.securitytracker.com/id/1032442WEB
- https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.ascWEB
- https://git-wip-us.apache.org/repos/asf?p=camel.git;a=commitdiff;h=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36WEB
- https://github.com/advisories/GHSA-3hrc-f439-727gADVISORY
- https://github.com/apache/camelPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan