CVE-2019-0194

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-0194
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0194.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-0194
Aliases
Published
2019-04-30T22:29:00.607Z
Modified
2026-07-08T20:05:06.413509Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

References

Affected packages

Git / github.com/apache/camel

Affected ranges

Type
GIT
Repo
https://github.com/apache/camel
Events
Introduced
6c88ad61b73dbfbc49c62624096ca0c250111430
Last affected
6cb00233e8e94dc9028f9ec02b5580d04de24c66
Introduced
36bea62e844c5037b8c4d9e0eab5cc6b189fe1da
Last affected
d9d91408da0c99ed5538e23ba1d404d0342900db
Introduced
363777cc93ab6072cd12d2a231c2165cbc6c0524
Last affected
65d603ddf448e8450dbe4c86abd2bed475c451c5
Introduced
675a6149321065b076b5d9a4ba9dfc29a2e72a3d
Last affected
675a6149321065b076b5d9a4ba9dfc29a2e72a3d
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:camel:2.23.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.19.0"
        },
        {
            "introduced": "2.21.0"
        },
        {
            "last_affected": "2.21.3"
        },
        {
            "introduced": "2.22.0"
        },
        {
            "last_affected": "2.22.2"
        },
        {
            "introduced": "2.23.0"
        },
        {
            "last_affected": "2.23.0"
        }
    ]
}

Affected versions

2.*
2.23.0
camel-2.*
camel-2.22.0
camel-2.22.2
camel-2.23.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0194.json"