Vulnerability in Apache Camel

CVE-2014-0003

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

EPSS: 0.230 (96.0th percentile) — read the EPSS interpretation.

Affected products

Apache Camel — versions 1.0.0, 1.1.0, 1.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

57125 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
RHSA-2014:0254 (x_refsource_REDHAT, vendor-advisory)
RHSA-2014:0371 (x_refsource_REDHAT, vendor-advisory)
65902 (vdb-entry, x_refsource_BID)
57719 (x_refsource_SECUNIA, third-party-advisory)
RHSA-2014:0245 (x_refsource_REDHAT, vendor-advisory)
57716 (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
RHSA-2014:0372 (x_refsource_REDHAT, vendor-advisory)
[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html (mailing-list, x_refsource_MLIST)