High severityNVD Advisory· Published Mar 21, 2014· Updated Jun 17, 2026
CVE-2014-0002
CVE-2014-0002
Description
The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.camel:camel-coreMaven | < 2.11.4 | 2.11.4 |
org.apache.camel:camel-coreMaven | >= 2.12.0, < 2.12.3 | 2.12.3 |
Affected products
32cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*+ 30 more
- cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*range: <=2.11.3
- cpe:2.3:a:apache:camel:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone1:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone2:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone3:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
18- camel.apache.org/security-advisories.data/CVE-2014-0002.txt.ascnvdExploitVendor AdvisoryWEB
- secunia.com/advisories/57125nvdVendor Advisory
- github.com/advisories/GHSA-2fw5-rvf2-jq56ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-0002ghsaADVISORY
- rhn.redhat.com/errata/RHSA-2014-0371.htmlnvdWEB
- rhn.redhat.com/errata/RHSA-2014-0372.htmlnvdWEB
- github.com/apache/camel/commit/2ec54fa0c13ae65bdcccff764af081a79fcc05fghsaWEB
- github.com/apache/camel/commit/341d4e6cca71c53c90962d1c3d45fc9e05cc50c6ghsaWEB
- github.com/apache/camel/commit/54b65c1d30848835f26bd138c0ba407bc1e560dghsaWEB
- issues.apache.org/jira/browse/CAMEL-7129ghsaWEB
- lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3EnvdWEB
- lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3EghsaWEB
- lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3EnvdWEB
- lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3EghsaWEB
- web.archive.org/web/20200229061309/http://www.securityfocus.com/bid/65901ghsaWEB
- secunia.com/advisories/57716nvd
- secunia.com/advisories/57719nvd
- www.securityfocus.com/bid/65901nvd
News mentions
0No linked articles in our index yet.