[TAMAYA-410] Update camel-core dependency past CVE-2019-0188

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Assignee: William Lieurance
• Reporter: William Lieurance
• Created: 07/Jun/19 04:51
• Updated: 07/Jun/19 06:35
• Resolved: 07/Jun/19 05:03

Description

CVE-2019-0188

 
high severity
Vulnerable versions: < 2.24.0
Patched version: 2.24.0
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.

Issue Links

• links to: GitHub Pull Request #30