The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.apache.camel:camel-core(Maven) | 2.11.0 | 2.11.4 | N/A |
| org.apache.camel:camel-core(Maven) | 2.12.0 | 2.12.3 | N/A |
CVSS Metrics
