Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-5344
7.5
HIGHCVSS v2
Published
February 3, 2016
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.<= 2.15.4, = 2.16.0NVD