Lucene search
+L

1 matches found

OSV
OSV
added 2018/10/16 11:13 p.m.33 views

GHSA-VVJC-Q5VR-52Q6 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...

9.8CVSS7.2AI score0.10604EPSS
SaveExploits1References24
Rows per page
Query Builder