CVE-2018-8027

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

• CWE-611

• http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.ascMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/104933Third Party Advisory, VDB Entry
• https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
• https://lists.apache.org/thread.html/77f596fc63e63c2e9adcff3c34759b32c225cf0b582aedb755adaade%40%3Cdev.camel.apache.org%3E
• https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E
• http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.ascMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/104933Third Party Advisory, VDB Entry
• https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
• https://lists.apache.org/thread.html/77f596fc63e63c2e9adcff3c34759b32c225cf0b582aedb755adaade%40%3Cdev.camel.apache.org%3E
• https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E

Published

Jul 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8021Versions of Superset prior to 0.23 used an unsafe load metho…
• CVE-2018-8022A carefully crafted invalid TLS handshake can cause Apache T…
• CVE-2018-8023Apache Mesos can be configured to require authentication to …
• CVE-2018-8024In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, i…
• CVE-2018-8025CVE-2018-8025 describes an issue in Apache HBase that affect…
• CVE-2018-8026This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 t…
• CVE-2018-8028An authenticated user can execute ALTER TABLE EXCHANGE PARTI…
• CVE-2018-8029In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.…
• CVE-2018-8030A Denial of Service vulnerability was found in Apache Qpid B…
• CVE-2018-8031The Apache TomEE console (tomee-webapp) has a XSS vulnerabil…
• CVE-2018-8032Apache Axis 1.x up to and including 1.4 is vulnerable to a c…6.1
• CVE-2018-8033In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine …