2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"Apache Camel","vendor":"Apache Software Foundation","versions":[{"status":"affected","version":"2.17.0 to 2.17.5"},{"status":"affected","version":"2.18.0 to 2.18.2"},{"status":"affected","version":"The unsupported Camel 2.x (2.16 and earlier) versions may be also affected."}]}],"source":"security@apache.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*","matchCriteriaId":"4D87B102-960B-420E-A7BE-C5C8D26DD55D","versionEndIncluding":"2.16.0","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.0:*:*:*:*:*:*:*","matchCriteriaId":"4057EE83-770C-4448-A020-3ADBA340B01E","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7AA4A-DCC5-4074-9509-A24FAB558527","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.2:*:*:*:*:*:*:*","matchCriteriaId":"A8DB9E52-C5B3-469B-8C04-B2DFDF6199D5","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"DD84467E-AAC5-4147-A295-75BA169B1318","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"A427238F-0D26-44AF-90A7-394A14B185FE","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8EEB54-1119-45C2-87BD-2DEF87E859FF","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.18.0:*:*:*:*:*:*:*","matchCriteriaId":"706C1A6D-2C4D-4A8F-BB64-4E36954CB0B7","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.18.1:*:*:*:*:*:*:*","matchCriteriaId":"AC9C31F3-91A7-4BBF-B5FA-44C2C008A71F","vulnerable":true},{"criteria":"cpe:2.3:a:apache:camel:2.18.2:*:*:*:*:*:*:*","matchCriteriaId":"EE52612C-5EE4-4333-A09A-03403565A480","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE."},{"lang":"es","value":"Apache Camel's Validation Component es vulnerable contra ataques de SSRF a través de DTDs y XXE remotos."}],"id":"CVE-2017-5643","lastModified":"2026-06-17T01:20:54.773","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":4.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-03-16T15:59:00.947","references":[{"source":"security@apache.org","tags":["Vendor Advisory"],"url":"http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2"},{"source":"security@apache.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97226"},{"source":"security@apache.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:1832"},{"source":"security@apache.org","url":"https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E"},{"source":"security@apache.org","url":"https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97226"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:1832"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E"}],"sourceIdentifier":"security@apache.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"nvd@nist.gov","type":"Primary"}]}
|