[MAVEN:GHSA-H6RP-8V4J-HWPH] Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

Severity High

Affected Packages 2

Fixed Packages 2

CVEs 1

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

Package	Affected Version
pkg:maven/org.apache.camel/camel-core	>= 2.12.0, < 2.12.3
pkg:maven/org.apache.camel/camel-core	>= 2.11.0, < 2.11.4

Package	Fixed Version
pkg:maven/org.apache.camel/camel-core	= 2.12.3
pkg:maven/org.apache.camel/camel-core	= 2.11.4

ID: MAVEN:GHSA-H6RP-8V4J-HWPH
Severity: high
URL: https://github.com/advisories/GHSA-h6rp-8v4j-hwph
Published: 2018-10-16T23:13:49
(6 years ago)
Modified: 2023-12-19T22:05:23
(9 months ago)
Rights: Maven Security Team

Source	# ID	Name	URL
			https://nvd.nist.gov/vuln/detail/CVE-2014-0003
			https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
			https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
			http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.asc
			http://rhn.redhat.com/errata/RHSA-2014-0245.html
			http://rhn.redhat.com/errata/RHSA-2014-0254.html
			http://rhn.redhat.com/errata/RHSA-2014-0371.html
			http://rhn.redhat.com/errata/RHSA-2014-0372.html
			https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
			https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E
			https://web.archive.org/web/20200229061309/http://www.securityfocus.com/bid/65902
			https://github.com/apache/camel/commit/483b445dc77487e2d0f3d8c8bf1a7bbab04464c
			https://github.com/apache/camel/commit/c6de749e9b3c7b61861c5480e91550290585224
			https://github.com/apache/camel/commit/e922f89290f236f3107039de61af0375826bd96d
			https://issues.apache.org/jira/browse/CAMEL-7123
			https://github.com/advisories/GHSA-h6rp-8v4j-hwph

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:maven/org.apache.camel/camel-core	org.apache.camel	camel-core	>= 2.12.0 < 2.12.3
Fixed	pkg:maven/org.apache.camel/camel-core	org.apache.camel	camel-core	= 2.12.3
Affected	pkg:maven/org.apache.camel/camel-core	org.apache.camel	camel-core	>= 2.11.0 < 2.11.4
Fixed	pkg:maven/org.apache.camel/camel-core	org.apache.camel	camel-core	= 2.11.4

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date