Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods
High severity
GitHub Reviewed
Published
Oct 16, 2018
to the GitHub Advisory Database
•
Updated Dec 19, 2023
Package
Affected versions
>= 2.11.0, < 2.11.4
>= 2.12.0, < 2.12.3
Patched versions
2.11.4
2.12.3
Description
Published by the National Vulnerability Database
Mar 21, 2014
Published to the GitHub Advisory Database
Oct 16, 2018
Reviewed
Jun 16, 2020
Last updated
Dec 19, 2023
Credits
-
sunSUNQ Analyst
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
References