{"id":"CVE-2018-8027","details":"Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.","aliases":["GHSA-8vfm-4388-6rpc"],"modified":"2026-07-08T12:28:21.883219Z","published":"2018-07-31T13:29:00.857Z","references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/77f596fc63e63c2e9adcff3c34759b32c225cf0b582aedb755adaade%40%3Cdev.camel.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E"},{"type":"ADVISORY","url":"http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.asc"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/104933"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/camel","events":[{"introduced":"aff4434eb839e9d690a0419230264b14a0ddeb22"},{"last_affected":"32bfda73ddd1ea8576bcb53dac496af9e0825f1a"},{"introduced":"36bea62e844c5037b8c4d9e0eab5cc6b189fe1da"},{"last_affected":"36bea62e844c5037b8c4d9e0eab5cc6b189fe1da"}],"database_specific":{"cpe":["cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:camel:2.21.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.20.0"},{"last_affected":"2.20.3"},{"introduced":"2.21.0"},{"last_affected":"2.21.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["2.21.0","camel-2.20.3","camel-2.21.0","camel-2.20.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8027.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}