CVE-2020-11994 Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Description

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Affected products and versions

Product	Affected versions	Fixed in
Apache Camel	Versions not published

Other CVEs of Apache Camel

The 4 CVEs of Apache Camel →

CVE-2020-11972 Apache Camel RabbitMQ enables Java deserialization by default Not rated CVE-2020-11973 Apache Camel Netty enables Java deserialization by default Not rated CVE-2020-11971 Apache Camel's JMX is vulnerable to Rebind Flaw Not rated