CVE-2019-0194

HIGH7.5EPSS 2.4%

Path Traversal in Apache Camel

發布日:2019/5/2修改日:2023/11/8

描述

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

受影響套件(1)

Maven/org.apache.camel:camel-core>= 2.21.0, < 2.21.5

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(9)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-0194
PATCHhttps://github.com/apache/camel
WEBhttps://github.com/apache/camel/pull/2700
WEBhttps://issues.apache.org/jira/browse/CAMEL-13042
WEBhttps://lists.apache.org/thread.html/0a163d02169d3d361150e8183df4af33f1a3d8a419b2937ac8e6c66f@%3Cusers.camel.apache.org%3E
WEBhttps://lists.apache.org/thread.html/45e23ade8d3cb754615f95975e89e8dc73c59eeac914f07d53acbac6@%3Ccommits.camel.apache.org%3E
WEBhttps://lists.apache.org/thread.html/a39441db574ee996f829344491b3211b53c9ed926f00ae5d88943b76@%3Cdev.camel.apache.org%3E
WEBhttps://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
WEBhttp://www.openwall.com/lists/oss-security/2019/04/30/2