CVE-2013-4330

Опубликовано: 04 окт. 2013

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*

Версия до 2.9.6 (включая)

cpe:2.3:a:apache:camel:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone1:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone2:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone3:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.7.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.8.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.9.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.11.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.11.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.12.0:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2267

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2013-4330

redhat

больше 12 лет назад

GHSA-x9fv-c87w-55wc

github

больше 3 лет назад

Improper Control of Generation of Code in Apache Camel