CVE-2017-12634
Fixed upstream EPSS 7%
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
Products: Apache Software Foundation Apache Camel
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.camel:camel-castor | 2.19.4 |
| Maven | org.apache.camel:camel-castor | 2.20.1 |