Versions Compared

Old Version 9

changes.mady.by.user Claus Ibsen

Saved on

compared with

New Version 10

changes.mady.by.user Andrea Cosentino

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

2016

  • CVE-2016-8749: Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

2015

  • CVE-2015-5344 - Apache Camel's XStream usage is vulnerable to Remote Code Execution attacks.
  • CVE-2015-5348 - Apache Camel's Jetty/Servlet usage is vulnerable to Java object de-serialisation vulnerability.
  • CVE-2015-0264 - The XPath handling in Apache Camel for invalid XML Strings or invalid XML GenericFile objects allows remote attackers to read arbitrary files via an XML External Entity (XXE) declaration. The XML External Entity (XXE) will be resolved before the Exception is thrown.
  • CVE-2015-0263 - The XML converter setup in Apache Camel allows remote attackers to read arbitrary files via an SAXSource containing an XML External Entity (XXE) declaration.

...