Lucene search

K
osvGoogleOSV:GHSA-2X6R-7427-95CM
HistoryMay 21, 2021 - 7:20 p.m.

Deserialization of Untrusted Data in Apache Camel RabbitMQ

2021-05-2119:20:47
Google
osv.dev
19

EPSS

0.008

Percentile

81.7%

Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

EPSS

0.008

Percentile

81.7%