CVE-2015-0264

Published: Jun 3, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.

Affected (3)

Products: Apache: Camel

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Camel	Up to 2.13.3
Apache Camel	Version 2.14.0
Apache Camel	Version 2.14.1

References (16)

http://rhn.redhat.com/errata/RHSA-2015-1041.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1538.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1539.html

Source: secalert@redhat.com

http://securitytracker.com/id/1032442

Source: secalert@redhat.com

https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc

Source: secalert@redhat.com

Vendor Advisory

https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=1df559649a96a1ca0368373387e542f46e4820da

Source: secalert@redhat.com

https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1041.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1538.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1539.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id/1032442

Source: af854a3a-2127-422b-91ae-364da2661108

https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=1df559649a96a1ca0368373387e542f46e4820da

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.