Lucene search

Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation

🗓️ 16 Oct 2018 23:58:05Reported by GitHub Advisory DatabaseType

Apache Camel camel-castor component Java object de-serialisation vulnerability

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Prion	Design/Logic Flaw	15 Nov 201715:29	–	prion
OSV	Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation	16 Oct 201823:05	–	osv
OSV	CVE-2017-12634	15 Nov 201715:29	–	osv
Cvelist	CVE-2017-12634	15 Nov 201715:00	–	cvelist
RedhatCVE	CVE-2017-12634	15 Nov 201710:19	–	redhatcve
Veracode	Deserialisation Of Untrusted Object	16 Nov 201703:34	–	veracode
CVE	CVE-2017-12634	15 Nov 201715:29	–	cve
NVD	CVE-2017-12634	15 Nov 201715:29	–	nvd
RedHat Linux	(RHSA-2018:0319) Important: Red Hat JBoss Fuse/A-MQ 6.3 R6 security and bug fix update	14 Feb 201819:27	–	redhat

Vulners

Node

org.apache.camel camel-castor

org.apache.camel camel-castorRange2.0.0–2.19.4

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-12634
access	www.access.redhat.com/errata/RHSA-2018:0319
github	www.github.com/advisories/GHSA-vf4q-8mr7-5c5c
issues	www.issues.apache.org/jira/browse/CAMEL-11929
lists	www.lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
lists	www.lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
camel	www.camel.apache.org/security-advisories.data/CVE-2017-12634.txt.asc
securityfocus	www.securityfocus.com/bid/101876
github	www.github.com/apache/camel/commit/2ae645e90edff3bcc1b958cb53ddc5e60a7f49fd
github	www.github.com/apache/camel/commit/573ebd3de810cc7e239f175e1d2d6993f1f2ad08

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2018 23:05Current

2.1Low risk

Vulners AI Score2.1

CVSS27.5

CVSS39.8

EPSS0.04796

CWE-502