~ / search / GHSA-4wjq-69rc-8wcp

GHSA-4wjq-69rc-8wcp

Path Traversal in Apache Camel

Source: GitHub Advisory Database (reviewed) High CVE-2019-0194

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.camel:camel-core >= 2.21.0, < 2.21.5 2.21.5
Maven org.apache.camel:camel-core >= 2.22.0, < 2.22.3 2.22.3
Maven org.apache.camel:camel-core >= 2.23.0, < 2.23.1 2.23.1

Details

As written in the advisory (Markdown source, shown as plain text).

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

References

External links from the advisory. They lead to third-party sites.