Loading HuntDB...

GHSA-8vfm-4388-6rpc

GitHub Security Advisory

Apache is vulnerable to XXE in XSD validation processor

✓ GitHub Reviewed CRITICAL Has CVE

Advisory Details

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

Affected Packages

Maven org.apache.camel:camel-core
Affected versions: 2.20.0 (fixed in 2.20.4)
Maven org.apache.camel:camel-core
Affected versions: 2.21.0 (fixed in 2.21.1)

Related CVEs

Key Information

GHSA ID
GHSA-8vfm-4388-6rpc
Published
October 16, 2018 11:06 PM
Last Modified
November 17, 2022 6:47 PM
CVSS Score
9.0 /10
Primary Ecosystem
Maven
Primary Package
org.apache.camel:camel-core
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.