Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Camel XML外部实体漏洞
Vulnerability Description
Apache Camel是美国阿帕奇（Apache）软件基金会的一套开源的基于Enterprise Integration Pattern(企业整合模式，简称EIP)的集成框架。该框架提供企业集成模式的Java对象（POJO）的实现，且通过应用程序接口来配置路由和中介的规则。 Apache Camel 2.13.4之前版本和2.14.2之前2.14.x版本的converter/jaxp/XmlConverter.java文件中的XML转换器安装过程存在XML外部实体漏洞。远程攻击者可借助SAXSource
CVSS Information
N/A
Vulnerability Type
N/A