title: Apache Camel JIRA: Temporary file information disclosure in Camel-Jira
description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3.
Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
problem types: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
defaultStatus: unaffected
product: Apache Camel JIRA
vendor: Apache Software Foundation
versions:
lessThanOrEqual: <=3.14.8, status: affected, version: 3.x, versionType: semver
lessThanOrEqual: <=3.18.7, status: affected, version: 3.18.x, versionType: semver
lessThanOrEqual: <= 3.20.5, status: affected, version: 3.20.x, versionType: semver
lessThanOrEqual: <= 4.0.0-M3, status: affected, version: 4.x, versionType: semver
}
metrics:
other: [
content: {'text': 'low'}
type: Textual description of severity
]