Version The unsupported Camel 2.x (2.16 and earlier) versions may be also affected.

CVE-2017-5643

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.