Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-12634
7.5
HIGHCVSS v2
Published
November 15, 2017
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.>= 2.0.0, < 2.19.4, = 2.20.0NVD