NVD

Id
39952  
Name
CVE-2013-4330  
Description
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-04  
Modified Date
2014-03-26  
Seq
2013-4330  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203262 39952 CVE-2013-4330 http://camel.apache.org/security-advisories.data/CVE-2013-4330.txt.asc?version=1&modificationDate=1380535446943  View
203263 39952 CVE-2013-4330 http://packetstormsecurity.com/files/123454/  View
203264 39952 CVE-2013-4330 RHSA-2013:1862  View
203265 39952 CVE-2013-4330 RHSA-2014:0124  View
203266 39952 CVE-2013-4330 RHSA-2014:0140  View
203267 39952 CVE-2013-4330 RHSA-2014:0245  View
203268 39952 CVE-2013-4330 RHSA-2014:0254  View
203269 39952 CVE-2013-4330 20130930 CVE-2013-4330: Apache Camel critical disclosure vulnerability  View
203270 39952 CVE-2013-4330 apache-camel-cve20134330-code-exec(87542)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22957 JVNDB-2013-004532 Apache Camel における任意の Simple 言語式を実行される脆弱性 Apache Camel には、任意のSimple 言語式を実行される脆弱性が存在します。 CVE-2013-4330 64272 CVE-2013-4330 39952 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004532.html 2013-09-30 2015-08-10 View