Skip to content
Not rated

CVE-2019-0188 Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an…

Description

Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.

Affected products and versions

Product Affected versions Fixed in
Apache Camel Versions not published
The 2 CVEs of Apache Camel →
Track this CVE