High severity7.5NVD Advisory· Published Jul 8, 2020· Updated Jun 17, 2026
CVE-2020-11994
CVE-2020-11994
Description
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.camel:camel-robotframeworkMaven | < 3.4.0 | 3.4.0 |
Affected products
8- cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*Range: >=8.0.0,<=8.5.0
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*
- Camel/Cameldescription
Patches
Vulnerability mechanics
References
9- www.oracle.com/security-alerts/cpuApr2021.htmlnvdPatchThird Party AdvisoryWEB
- www.oracle.com/security-alerts/cpujan2021.htmlnvdPatchThird Party AdvisoryWEB
- www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-9vfj-5g7h-4p24ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-11994ghsaADVISORY
- lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600@%3Cannounce.tomcat.apache.org%3EghsaWEB
- lists.apache.org/thread.html/r0a406dc5a158fe6fab6ee85f6e082a8473c0c346b37db8cc7a4619e6%40%3Cdev.camel.apache.org%3EghsaWEB
- snyk.io/vuln/SNYK-JAVA-ORGAPACHECAMEL-575542ghsaWEB
- lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3Envd
News mentions
0No linked articles in our index yet.