Integration Camel K
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:integration_camel_k:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Integration Camel K (cbef8ecb-37e9-5cd2-8de7-3d86ad27b234) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/apache/camel-k |
purl2cpe | 2026-06-01 10:12:53.623187 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4853 |
vulnerable | 2026-06-03 14:53:29.830680 |
Quarkus: http security policy bypass
HIGH (8.1)
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.
Published: 2023-09-20T09:47:32.150Z
Updated: 2025-11-07T10:17:29.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4245 |
vulnerable | 2026-06-03 14:48:35.324193 |
Codehaus-plexus: xml external entity (xxe) injection
MEDIUM (4.3)
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
Published: 2023-09-25T19:20:57.329Z
Updated: 2024-08-03T01:34:49.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4244 |
vulnerable | 2026-06-03 14:48:35.323211 |
Codehaus-plexus: directory traversal
HIGH (7.5)
A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.
Published: 2023-09-25T19:20:04.703Z
Updated: 2024-08-03T01:34:49.883Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.