CVE-2020-11973

2020-05-1416:22:23

apache

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.014

Percentile

86.3%

JSON

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

CNA Affected

[
  {
    "product": "Apache Camel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0"
      }
    ]
  }
]