CVE-2018-8027

Description

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

How to fix CVE-2018-8027

To remediate CVE-2018-8027, upgrade the affected package to a fixed version below.

• Maven/org.apache.camel:camel-core—upgrade to 2.20.4 or later

Is CVE-2018-8027 being exploited?

Low — EPSS is 2.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• >= 2.20.0, < 2.20.4

CVSS scores

References (21)

• ADVISORYgithub.com/advisories/GHSA-8vfm-4388-6rpc
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-8027
• PATCHgithub.com/apache/camel
• WEBcamel.apache.org/security-advisories.data/CVE-2018-8027.txt.asc
• WEB