Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
07 Nov 2023, 03:01
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-05-28 19:29
Updated : 2024-02-28 17:08
NVD link : CVE-2019-0188
Mitre link : CVE-2019-0188
CVE.ORG link : CVE-2019-0188
JSON object : View
Products Affected
oracle
- enterprise_manager_base_platform
- enterprise_data_quality
- enterprise_repository
- flexcube_private_banking
apache
- camel
CWE
CWE-611
Improper Restriction of XML External Entity Reference