CVE-2019-0194
HIGH7.5EPSS 2.4%Path Traversal in Apache Camel
Published: 5/2/2019Modified: 11/8/2023
Description
Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.
Affected packages (1)
- Maven/org.apache.camel:camel-core>= 2.21.0, < 2.21.5
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
References (9)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-0194
- PATCHhttps://github.com/apache/camel
- WEBhttps://github.com/apache/camel/pull/2700
- WEBhttps://issues.apache.org/jira/browse/CAMEL-13042
- WEBhttps://lists.apache.org/thread.html/0a163d02169d3d361150e8183df4af33f1a3d8a419b2937ac8e6c66f@%3Cusers.camel.apache.org%3E
- WEBhttps://lists.apache.org/thread.html/45e23ade8d3cb754615f95975e89e8dc73c59eeac914f07d53acbac6@%3Ccommits.camel.apache.org%3E
- WEBhttps://lists.apache.org/thread.html/a39441db574ee996f829344491b3211b53c9ed926f00ae5d88943b76@%3Cdev.camel.apache.org%3E
- WEBhttps://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
- WEBhttp://www.openwall.com/lists/oss-security/2019/04/30/2