CVE-2020-11994 PUBLISHED

Reported by apache · Published July 8, 2020

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Affected Products

VendorProductVersions
n/aApache CamelCamel 2.25.0 to 2.25.1, Camel 3.0.0 to 3.3.0. The unsupported Camel 2.x (2.24 and earlier) versions may be also affected.
Mavenorg.apache.camel:camel-robotframework2.22.0, 2.22.0
n/aApache CamelCamel 2.25.0 to 2.25.1, Camel 3.0.0 to 3.3.0. The unsupported Camel 2.x (2.24 and earlier) versions may be also affected., Camel 2.25.0 to 2.25.1, Camel 3.0.0 to 3.3.0. The unsupported Camel 2.x (2.24 and earlier) versions may be also affected.

Timeline

References

Open in Interactive Console →