GitHub Advisoryadvisory · Maven

GHSA-h6rp-8v4j-hwph Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

HIGH Published 2018-10-16 Modified 2023-02-15 Official page ↗
Aliases
CVE-2014-0003
Ecosystem
Maven
Packages
org.apache.camel:camel-core
Severity
High
Weaknesses
CWE-502
Reviewed
2020-06-16

Affected packages

• Maven org.apache.camel:camel-core: >= 2.11.0, < 2.11.4 → fixed in 2.11.4 • Maven org.apache.camel:camel-core: >= 2.12.0, < 2.12.3 → fixed in 2.12.3

Description

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

Related

Alias · CVE (1)

  • CVE-2014-0003 The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to… vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References