Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2020-05-14T16:22:23
Updated: 2024-08-04T11:48:56.989Z
Reserved: 2020-04-21T00:00:00
Link: CVE-2020-11973
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-05-14T17:15:12.193
Modified: 2024-11-21T04:59:01.343
Link: CVE-2020-11973
Redhat