Vulnerability in Apache Camel

CVE-2014-0003

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

EPSS: 0.074 (93.8th percentile) — read the EPSS interpretation.

Affected products

  • Apache Camel — versions 1.0.0, 1.1.0, 1.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References