CVE-2024-22369CWE-502

Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository

High · published February 20, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.

Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00749 · 54.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-02-20T14:58Z
EPSS history
Timeline
  • 20 FEB 14:58Z
    Apache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepository
    cvelistv5