Red Hat Security Advisory

RHSA-2023:2099

Red Hat Integration Camel for Spring Boot 3.18.3 Patch 1 security update

Released 2023-05-03 · Red Hat rating Important · View on Red Hat →

Fixed in

RHINT Camel-Springboot 3.18.3.P1

Fixes 2 records

TI-2023-01295 CVE-2023-1370 · GHSA-493p-pfq6-5258

Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

HIGH 72

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01119 Published 2023-03-13 Partial fix · 2.4.9 CWE-674

TI-2023-07282 CVE-2023-20863 · GHSA-wxqc-pxw9-g2p8

Uncontrolled resource consumption in Spring Framework

LOW 31

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01122 Published 2023-04-13 Partial fix · 6.0.8, 5.3.27 +1 CWE-400