CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components

Score

CVSS 3.1 7.5 High

Status

Modified - security@apache.org

Published

2020-07-08

Last modified

2024-08-04

Weaknesses

CWE-74

Affected products

• Camel (Apache)
• Communications Diameter Signaling Router (Oracle)
• Enterprise Manager Base Platform (Oracle)
• Enterprise Repository (Oracle)

References

• https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apac…
• https://www.oracle.com/security-alerts/cpuApr2021.html
• https://www.oracle.com/security-alerts/cpujan2021.html
• https://www.oracle.com/security-alerts/cpuoct2021.html