NetSight
IP …
medium6.8

CVE-2013-4330

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by i…

Impact

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.

Affected products

VendorProductAffected versions
ApacheCamel
through 2.9.6
Versions 1.0.0, 1.1.0, 1.2.0, 1.3.0, 1.4.0

Weakness classification

CWE-94

References