Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.16.0"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.0"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.1"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.2"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.3"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.4"
},
{
"introduced": "0"
},
{
"last_affected": "2.17.5"
},
{
"introduced": "0"
},
{
"last_affected": "2.18.0"
},
{
"introduced": "0"
},
{
"last_affected": "2.18.1"
},
{
"introduced": "0"
},
{
"last_affected": "2.18.2"
}
]
}