CVE-2018-8041

moderate-risk

Published 2018-09-17

Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.

Do I need to act?

2.5% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

NETWORK / LOW complexity

Camel

Apache

Mailing List http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1...

Third Party Advisory http://www.securityfocus.com/bid/105352

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3768

Issue Tracking https://issues.apache.org/jira/browse/CAMEL-12630

Mailing List http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1...

Third Party Advisory http://www.securityfocus.com/bid/105352

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3768

Issue Tracking https://issues.apache.org/jira/browse/CAMEL-12630

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 6/34 · Minimal

Exposure 7/34 · Low