Vulnerabilities > Apache > Camel > 2.21.3

DATE CVE VULNERABILITY TITLE RISK
2019-05-28 CVE-2019-0188 XXE vulnerability in multiple products
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library.
network
low complexity
oracle apache CWE-611
7.5
2019-04-30 CVE-2019-0194 Path Traversal vulnerability in Apache Camel
Apache Camel's File is vulnerable to directory traversal.
network
low complexity
apache CWE-22
7.5