Read the docs
Red Hat Security Advisory

RHSA-2023:0544

Red Hat Camel for Spring Boot 3.14.5 Patch 1 release and security update

Released 2023-01-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2022-22907 CVE-2022-46364 · GHSA-x3x3-qwjq-8gj4

Apache CXF SSRF Vulnerability

Priority MEDIUM 53

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02315 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-918
TI-2022-22906 CVE-2022-46363 · GHSA-3w37-5p3p-jv92

Apache CXF directory listing / code exfiltration

Priority MEDIUM 41

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01261 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-20
TI-2022-19038 CVE-2022-40149 · GHSA-56h3-78gp-v83r

Stack Buffer Overflow in Jettison

Priority LOW 36

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01677 Published 2022-09-16 Partial fix · 1.5.1 CWE-121