Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

Vulnerability ID: GHSA-4wjq-69rc-8wcp
Aliases: CVE-2019-0194
Published: 2019-05-02 15:21:34
CWE: CWE-22
Severity rating: HIGH
CVSS: type: CVSS_V3
score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected packages:
package: ecosystem: Maven
name: org.apache.camel:camel-core
package: ecosystem: Maven
name: org.apache.camel:camel-core
package: ecosystem: Maven
name: org.apache.camel:camel-core