Lucene search
+L

628 matches found

Github Security Blog
Github Security Blog
added 2024/02/20 3:31 p.m.31 views

Deserialization of Untrusted Data in Apache Camel SQL

Deserialization of Untrusted Data vulnerability in Apache Camel SQL Component. This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users...

7.8CVSS7.4AI score0.00747EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2024/02/20 3:31 p.m.4 views

GHSA-M43P-55RF-8C2J Deserialization of Untrusted Data in Apache Camel CassandraQL

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

9.8CVSS5.9AI score0.01145EPSS
Exploits1References10
OSV
OSV
added 2024/02/20 3:31 p.m.4 views

GHSA-36XR-4X2F-CFJ9 Deserialization of Untrusted Data in Apache Camel SQL

Deserialization of Untrusted Data vulnerability in Apache Camel SQL Component. This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users...

8.6CVSS5.9AI score0.00747EPSS
Exploits0References14
NVD
NVD
added 2024/02/20 3:15 p.m.29 views

CVE-2024-23114

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

9.8CVSS9.4AI score0.01145EPSS
Exploits1References1
NVD
NVD
added 2024/02/20 3:15 p.m.23 views

CVE-2024-22369

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users a...

7.8CVSS9.7AI score0.00747EPSS
Exploits0References1
Prion
Prion
added 2024/02/20 3:15 p.m.26 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

7.1AI score0.01145EPSS
Exploits1References1
Prion
Prion
added 2024/02/20 3:15 p.m.23 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users a...

7.8AI score0.00747EPSS
Exploits0References1
CVE
CVE
added 2024/02/20 2:59 p.m.4624 views

CVE-2024-23114

CVE-2024-23114 affects the Apache Camel CassandraQL component’s AggregationRepository, where an unsafe deserialization exposes a path to remote code execution under certain conditions. The associated connected advisories confirm the issue and list affected series: Camel 3.x (3.0.0–3.21.4, and 3.2...

9.8CVSS9.2AI score0.01145EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/20 2:59 p.m.27 views

CVE-2024-23114 Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

6.7AI score0.01145EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/02/20 2:59 p.m.40 views

CVE-2024-23114 Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

6.7AI score0.01145EPSS
Exploits1References1
OSV
OSV
added 2024/02/20 2:59 p.m.15 views

CVE-2024-23114 Apache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22...

9.8CVSS7.2AI score0.01145EPSS
Exploits1References3
CVE
CVE
added 2024/02/20 2:58 p.m.6261 views

CVE-2024-22369

CVE-2024-22369 is a deserialization of untrusted data vulnerability in Apache Camel SQL Component, related to unsafe deserialization in the JDBCAggregationRepository. Affected versions include Camel 3.0.0–3.21.3, 3.22.0–3.22.0, 4.0.0–4.0.3, and 4.1.0–4.3.x (per the advisory). The issue could allo...

7.8CVSS7.8AI score0.00747EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/20 2:58 p.m.23 views

CVE-2024-22369 Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users a...

7.4AI score0.00747EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/20 2:58 p.m.25 views

CVE-2024-22369 Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users a...

7.3AI score0.00747EPSS
Exploits0References1
OSV
OSV
added 2024/02/20 2:58 p.m.11 views

CVE-2024-22369 Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users a...

7.8CVSS7.1AI score0.00747EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2024/02/20 5:19 a.m.35 views

CVE-2024-22369

A deserialization of untrusted data flaw was found in Apache Camel SQL Component JDBCAggregationRepository. The affected versions of Apache Camel are vulnerable to unsafe deserialization, where, under specific conditions, it is possible to deserialize a malicious payload...

7.8CVSS7.8AI score0.00747EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2024/02/20 5:19 a.m.47 views

CVE-2024-23114

A deserialization of untrusted data flaw was found in the Apache Camel CassandraQL Component AggregationRepository. The affected versions of Apache Camel are vulnerable to unsafe deserialization, where, under specific conditions, it is possible to deserialize a malicious payload...

9.8CVSS7.1AI score0.01145EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/02/19 12:0 a.m.7 views

PT-2024-1815 · Apache · Apache Camel

Name of the Vulnerable Software and Affected Versions: Apache Camel versions 3.0.0 through 3.21.3 Apache Camel versions 3.22.0 Apache Camel versions 4.0.0 through 4.0.3 Apache Camel versions 4.1.0 through 4.3.x Description: The issue is related to the deserialization of untrusted data in the Apac...

10CVSS8.2AI score0.00747EPSS
Exploits0References24
CNNVD
CNNVD
added 2024/02/19 12:0 a.m.11 views

Apache Camel 代码问题漏洞

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

9.8CVSS7.5AI score0.01145EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/02/19 12:0 a.m.7 views

Apache Camel Code Issue Vulnerability

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides an implementation of the Enterprise Integration Pattern Java Objects POJO, a...

7.8CVSS7.1AI score0.00747EPSS
Exploits0References3
Rows per page
Query Builder