Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-5643 Details

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.4 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2	CVE	Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1832	CVE	Third Party Advisory
https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E	CVE
https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E	CVE
http://www.securityfocus.com/bid/97226	CVE	Third Party AdvisoryVDB Entry
http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2	[email protected]	Vendor Advisory
https://access.redhat.com/errata/RHSA-2017:1832	[email protected]	Third Party Advisory
https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E	[email protected]
https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E	[email protected]
http://www.securityfocus.com/bid/97226	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-918	Server-Side Request Forgery (SSRF)	[email protected]

Product	Versions
apache camel	<= 2.16.0 2.17.0 2.17.1 2.17.2 2.17.3
CPE cpe:2.3:a:apache:camel:::::::: cpe:2.3:a:apache:camel:2.17.0:::::::* cpe:2.3:a:apache:camel:2.17.1:::::::* cpe:2.3:a:apache:camel:2.17.2:::::::* cpe:2.3:a:apache:camel:2.17.3:::::::* cpe:2.3:a:apache:camel:2.17.4:::::::* cpe:2.3:a:apache:camel:2.17.5:::::::* cpe:2.3:a:apache:camel:2.18.0:::::::* cpe:2.3:a:apache:camel:2.18.1:::::::* cpe:2.3:a:apache:camel:2.18.2:::::::* Remediation No remediation found in references.

Product

Versions

apache camel

<= 2.16.0

2.17.0

2.17.1

2.17.2

2.17.3

11 change records found show changes

QUICK INFO