CVE-2024-22371

Apache Camel issue on ExchangeCreatedEvent

Low · published February 26, 2024

CVSS v3.1
2.9
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0.

Users are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00695 · 52.4th percentile
Published
2024-02-26T09:22Z
EPSS history
Timeline
  • 26 FEB 09:22Z
    Apache Camel issue on ExchangeCreatedEvent
    cvelistv5