Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Description

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Apache Camel

  • Camel 2.25.0 to 2.25.1, Camel 3.0.0 to 3.3.0. The unsupported Camel 2.x (2.24 and earlier) versions may be also affected.affected

References