Red Hat Security AdvisoryRHSA-2023:3667
Red Hat Integration Camel Extensions for Quarkus 2.13.3 security update
Released 2023-06-19 · Red Hat rating Moderate · View on Red Hat →
Fixes 2 records
Priority HIGH 72
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01009 · Published 2023-03-16 · Partial fix · 1.5.4 CWE-674
Priority LOW 33
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02129 · Published 2022-12-03 · Partial fix · 3.9.0 CWE-20