Back to Vulnerability Directory
CRITICALFixed upstream
CVE-2017-12633
camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable…
Technology
Apache Camel
CVSS Score
9.8 / 10.0
Affected Versions
>=2.0.0 <2.19.4; >=2.20.0 <2.20.1
Upstream Fix
See upstream advisory
Published
November 15, 2017
OSSeva Coverage
Fixed upstream
Description
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
Is your Apache Camel deployment affected?
If you're running >=2.0.0 <2.19.4; >=2.20.0 <2.20.1, you need this patch. Book a discovery call to get covered.