Deserialisation Of Untrusted Object

🗓️ 16 Nov 2017 03:23:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 15 Views

Deserialization vulnerability in Camel-Casto

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2017-12634	15 Nov 201715:29	–	cve
NVD	CVE-2017-12634	15 Nov 201715:29	–	nvd
Cvelist	CVE-2017-12634	15 Nov 201715:00	–	cvelist
Prion	Design/Logic Flaw	15 Nov 201715:29	–	prion
OSV	Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation	16 Oct 201823:05	–	osv
OSV	CVE-2017-12634	15 Nov 201715:29	–	osv
RedhatCVE	CVE-2017-12634	15 Nov 201710:19	–	redhatcve
Github Security Blog	Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation	16 Oct 201823:05	–	github
RedHat Linux	(RHSA-2018:0319) Important: Red Hat JBoss Fuse/A-MQ 6.3 R6 security and bug fix update	14 Feb 201819:27	–	redhat

Vulners

Node

-camel_\Match\_castor_\(deprecated\)2.20.0

-camel_\Match\_castor_\(deprecated\)

Source	Link
camel	www.camel.apache.org/security-advisories.data/CVE-2017-12634.txt.asc
issues	www.issues.apache.org/jira/browse/CAMEL-11929

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Nov 2017 03:34Current

9.4High risk

Vulners AI Score9.4

EPSS0.04796