Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-22371
2.9
LOWCVSS v3
Published
February 26, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0. Users are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue.
apache/camel
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.
GitHubApache Camel is an open source integration framework with 350+ connectors. Write routes in Java, YAML, or XML. Run on Spring Boot, Quarkus, or standalone. Apache License 2.0.>= 3.0.0, < 3.21.4, >= 4.1.0, < 4.4.0, = 3.22.0, >= 4.0.0, < 4.0.4NVD