CVE-2023-34442
Apache Camel JIRA: Temporary file information disclosure in Camel-Jira
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
- Record
CVE-2023-34442- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Apache Camel JIRA: Temporary file information disclosure in Camel-Jira
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
- Record
CVE-2023-34442- Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2023-1978
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
- Record
EUVD-2023-1978- CVSS
- 0.0 None
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g2w-257v-3c9f
Apache Camel information exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel. This issue affects Apache Camel from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-RC1
- Record
GHSA-6g2w-257v-3c9f- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-6g2w-257v-3c9f
Apache Camel information exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel. This issue affects Apache Camel from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-RC1
- Record
GHSA-6g2w-257v-3c9f- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
Apache Camel JIRA: Temporary file information disclosure in Camel-Jira
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
- Record
CVE-2023-34442- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.camel:camel-jiraMaven |
3.0.0-M3 up to 3.14.9 | 3.14.9 |
org.apache.camel:camel-jiraMaven |
3.15.0 up to 3.18.8 | 3.18.8 |
org.apache.camel:camel-jiraMaven |
3.20.0 up to 3.20.6 | 3.20.6 |
org.apache.camel:camel-jiraMaven |
4.0.0-M1 to 4.0.0-M3 | 4.0.0-RC1 |
org.apache.camel:camel-jiraMaven |
3.0.0-M3 up to 3.14.9, plus listed versions 3.0.03.0.0-M43.0.0-RC13.0.0-RC23.0.0-RC3 Show 43 moreShow less3.0.13.1.03.10.03.11.03.11.13.11.23.11.33.11.43.11.53.11.63.11.73.12.03.13.03.14.03.14.13.14.23.14.33.14.43.14.53.14.63.14.73.14.83.2.03.3.03.4.03.4.13.4.23.4.33.4.43.4.53.4.63.5.03.6.03.7.03.7.13.7.23.7.33.7.43.7.53.7.63.7.73.8.03.9.0 |
3.14.9 |
org.apache.camel:camel-jiraMaven |
3.15.0 up to 3.18.8, plus listed versions 3.16.03.17.03.18.03.18.13.18.2 Show 5 moreShow less3.18.33.18.43.18.53.18.63.18.7 |
3.18.8 |
org.apache.camel:camel-jiraMaven |
3.20.0 up to 3.20.6, plus listed versions 3.20.13.20.23.20.33.20.43.20.5 |
3.20.6 |
org.apache.camel:camel-jiraMaven |
4.0.0-M1 up to 4.0.0-RC1, plus listed versions 4.0.0-M24.0.0-M3 |
4.0.0-RC1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-34442 is a low vulnerability (CVSS 3.3) in Apache Camel, published July 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in org.apache.camel:camel-jira 3.14.9.
References
lists.apache.org/thread/x4vy2hhbltb1xrvy1g6m8hpjgj2k7wgh
nvd.nist.gov/vuln/detail/CVE-2023-34442
github.com/apache/camel/commit/b61d5b6be4f98b673dc977ad1bc6f004642644ab
camel.apache.org/security/CVE-2023-34442.html
issues.apache.org/jira/browse/CAMEL-19421