CVE-2015-0263

Currently unrated

Key Information:

Vendor
Apache
Status
Camel
Vendor
CVE Published:
3 June 2015

Summary

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

References

http://rhn.redhat.com/errata/RHSA-2015-1539.html
vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1041.html
vendor-advisoryx_refsource_REDHAT
https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=c...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.