GitHub Advisoryadvisory · Maven

GHSA-4wjq-69rc-8wcp Path Traversal in Apache Camel

HIGH Published 2019-05-02 Modified 2022-11-17 Official page ↗
Aliases
CVE-2019-0194
Ecosystem
Maven
Packages
org.apache.camel:camel-core
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2019-05-02

Affected packages

• Maven org.apache.camel:camel-core: >= 2.21.0, < 2.21.5 → fixed in 2.21.5 • Maven org.apache.camel:camel-core: >= 2.22.0, < 2.22.3 → fixed in 2.22.3 • Maven org.apache.camel:camel-core: >= 2.23.0, < 2.23.1 → fixed in 2.23.1

Description

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

Related

Alias · CVE (1)

  • CVE-2019-0194 Apache Camel's File is vulnerable to directory traversal. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References