Vulnerability	Vulnerable Version
H Directory Traversal Affected versions of this package are vulnerable to Directory Traversal via the process that resolves remote file paths from server directory listings without constraining them to the intended directory. An attacker can access, delete, or rename files outside the designated polling directory by supplying directory listing entries containing traversal segments, potentially leading to unauthorized file operations on the remote server. This is only exploitable if the remote server or an on-path attacker can manipulate directory listing responses, and if destructive operations such as delete, move, preMove, moveFailed, or readLock=rename are enabled. How to fix Directory Traversal? Upgrade `org.apache.camel:camel-ftp` to version 4.18.5, 4.22.1 or higher.	[4.0.0,4.18.5)[4.19.0,4.22.1)

Directory Traversal

Affected versions of this package are vulnerable to Directory Traversal via the process that resolves remote file paths from server directory listings without constraining them to the intended directory. An attacker can access, delete, or rename files outside the designated polling directory by supplying directory listing entries containing traversal segments, potentially leading to unauthorized file operations on the remote server. This is only exploitable if the remote server or an on-path attacker can manipulate directory listing responses, and if destructive operations such as delete, move, preMove, moveFailed, or readLock=rename are enabled.

How to fix Directory Traversal?

Upgrade org.apache.camel:camel-ftp to version 4.18.5, 4.22.1 or higher.

[4.0.0,4.18.5)[4.19.0,4.22.1)

Go back to all versions of this package