WID-SEC-W-2025-0284

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apache Camel for Spring Boot: Mehrere Schwachstellen

view advisory published 2025-02-05

Ein Angreifer kann mehrere Schwachstellen in Apache Camel, Red Hat Enterprise Linux und Red Hat Integration ausnutzen, um beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-52046UScritical9.8—
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses.…
CVE-2024-12798US——
ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execu…
CVE-2024-53990US——
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP request, the automaticall…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan