VDB
CVE-2018-8041
CVE-2018-8041
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.
EPSS 9.59% · 95.3th percentile
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
9.59%
95.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Camel | Camel 2.20.0 to 2.20.3, Camel 2.21.0 to 2.21.1 and Camel 2.22.0 |
| Maven | org.apache.camel:camel-mail | 2.20.0, 2.21.0, 2.22.0 |
| apache | camel | 2.21.0, 2.22.0, 2.20.0 |
Timeline
- Sep 17, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Sep 14, 2021 CVE Updated
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 2, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Nov 9, 2022 EPSS Score
- Jan 11, 2023 EPSS Score
- Mar 15, 2023 EPSS Score
References
- [camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2018-8041 advisory
- https://github.com/apache/camel/commit/4580e4d6c65cfd544c1791c824b5819477c583cc url
- https://github.com/apache/camel/commit/4f401c09d22c45c94fa97746dc31905e06b19e3 url
- https://github.com/apache/camel/commit/63c7c080de4d18f9ceb25843508710df2c2c6d4 url
- https://github.com/apache/camel/commit/a0d25d9582c6ee85e9567fa39413df0b4f02ef7 url
- https://github.com/advisories/GHSA-jv74-f9pj-xp3f advisory
- https://github.com/apache/camel package
- https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E url
- https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E url
- http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1&modificationDate=1536746339000&api=v2 url
- https://access.redhat.com/errata/RHSA-2018:3768 advisory
- https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E technical
- http://www.securityfocus.com/bid/105352 advisory
- https://issues.apache.org/jira/browse/CAMEL-12630 issue