{"action":"Upgrade org.apache.camel:camel-core to 2.17.6 (2.17.x) or 2.18.2 (2.18.x) or later.","affected":[{"fixed":"2.17.6","introduced":"0"},{"fixed":"2.18.2","introduced":"2.18.0"}],"component":"org.apache.camel:camel-core","cve_ids":["CVE-2017-5643"],"ecosystem":"Maven","epss":0.05863,"exploited":false,"fixed_versions":["2.17.6","2.18.2"],"ghsa_id":"GHSA-vq9j-jh62-5hmp","id":"tcs_01M5N9EKX8VE0N6PFDATMEBF6Q","modified_at":"2024-02-20T05:32:17.959090Z","published_at":"2018-10-16T23:13:11Z","references":["https://osv.dev/vulnerability/GHSA-vq9j-jh62-5hmp","https://nvd.nist.gov/vuln/detail/CVE-2017-5643","https://github.com/apache/camel/commit/2c6964ae94d8f9a9c9a32e5ae5a0b794e8b8d3be","https://github.com/apache/camel/commit/8afc5d1757795fde715902067360af5d90f046da","https://github.com/apache/camel/commit/9f7376abbff7434794f2c7c2909e02bac232fb5b","https://access.redhat.com/errata/RHSA-2017:1832","https://github.com/advisories/GHSA-vq9j-jh62-5hmp","https://github.com/apache/camel","https://issues.apache.org/jira/browse/CAMEL-10894","https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E","https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E","http://camel.apache.org/security-advisories.data/CVE-2017-5643.txt.asc?version=1&modificationDate=1489652454000&api=v2","http://www.securityfocus.com/bid/97226"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-vq9j-jh62-5hmp","url":"https://osv.dev/vulnerability/GHSA-vq9j-jh62-5hmp"}],"summary":"Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE."}